mcp-injection-poc

MCP Transparent Proxy Injection — Proof of Concept CVE: pe...

CVE-2026-19330

A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function createsystemjson/createlibrary to getsystemjson/switchmemorylibrary of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was...

PT-2026-69254

Name of the Vulnerable Software and Affected Versions angrysky56 advanced-reasoning-mcp version 1.0.0 Description A path traversal issue exists in the file src/index.ts within the functions create system json, create library, get system json, and switch memory library. Path traversal is a flaw th...

MCP Server Auth Abuse Detection

Probes Model Context Protocol SSE transports and JSON-RPC message endpoints for unauthenticated tools/list and exposed MCP admin surfaces. !/usr/bin/env python3 -- coding: utf-8 -- """MCP server authentication abuse: unauthenticated tools/list and SSE endpoints.""" from kittysploit import from...

GHSA-2V37-7H3G-55P8 vulnerabilities

Vulnerabilities for packages: json-server, keep, vite, langfuse, renovate, tensorflow-gpu-jupyter, unleash, homepage, vitess, authentik, gitlab-rails-ce-fips, arangodb, gitlab-rails-ce, unleash-fips, nextcloud-server, langfuse-fips, keep-fips, commercial-gitlab-rails-ee-fips, pelias-api,...

CVE-2026-67213 vulnerabilities

Vulnerabilities for packages: json-server, keep, vite, langfuse, renovate, tensorflow-gpu-jupyter, unleash, homepage, vitess, authentik, gitlab-rails-ce-fips, arangodb, gitlab-rails-ce, unleash-fips, nextcloud-server, langfuse-fips, keep-fips, commercial-gitlab-rails-ee-fips, pelias-api,...

CVE-2026-67213 vulnerabilities

Vulnerabilities for packages: saf, renovate, nextcloud-server, langfuse, jitsucom-jitsu, vite, vitess, json-server, jupyter-base-notebook...

GHSA-2V37-7H3G-55P8 vulnerabilities

Vulnerabilities for packages: saf, renovate, nextcloud-server, langfuse, jitsucom-jitsu, vite, vitess, json-server, jupyter-base-notebook...

Open Notebook LFI (CVE-2026-33589)

CVE-2026-33589 in Open Notebook = 1.8.3: POST /api/sources/json accepts type=upload with an arbitrary filepath and returns fulltext from any file readable by the process. Unauthenticated when OPENNOTEBOOKPASSWORD is unset. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2026-33589 — Open Noteboo...

EUVD-2026-54785

A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation...

CVE-2026-19285 aaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path traversal

A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation...

DEBIAN-CVE-2026-19017

Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT or AppRole authentication. A privileged attacker with operator:write permission may direct Consul to read and forward...

CVE-2026-62295 HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth for arrays or objects. As a result, a small but deeply nested,...

CVE-2026-62295

HAPI FHIR (Java) prior to 6.9.11 has a denial-of-service risk: the JSON parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth, so deeply nested, valid FHIR JSON can trigger unbounded readArray/readObject recursion and cause a StackOverflowError before validatio...

CVE-2026-62295 HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth for arrays or objects. As a result, a small but deeply nested,...

CVE-2026-62295

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth for arrays or objects. As a result, a small but deeply nested,...

CVE-2026-62295

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth for arrays or objects. As a result, a small but deeply nested,...

CVE-2026-48039

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.109, "AuthInjectionMiddleware.dispatch" at "httpauthintegration.py:272" unconditionally forwards unauthenticated Streamable HTTP requests to downstream MCP tool handlers without issuing ...

CVE-2026-48039 Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.109, AuthInjectionMiddleware.dispatch at httpauthintegration.py:272 unconditionally forwards unauthenticated Streamable HTTP requests to downstream MCP tool handlers without issuing a 40...

CVE-2026-48039

CVE-2026-48039 : In Meta Ads MCP, versions before 1.0.109 suffer an authentication bypass where AuthInjectionMiddleware.dispatch() forwards unauthenticated /mcp requests to tool handlers, and when no per-request credential exists, falls back to META_ACCESS_TOKEN. The downstream Graph API error pa...