Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/19 8:13 p.m.16 views

CamoFox MCP: Unauthenticated HTTP MCP browser-control surface

Unauthenticated HTTP MCP browser-control surface in camofox-mcp Summary camofox-mcp exposed a Streamable HTTP MCP endpoint at /mcp with rate limiting but no inbound MCP-layer authentication. When HTTP mode was enabled, any client that could reach /mcp could list and invoke browser-control tools. ...

5.8AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder