4 matches found
CVE-2026-117570
Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scanvulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script,...
EUVD-2026-110848
Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scanvulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script,...
PT-2026-126429
Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan vulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script...
