Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
added 2026/05/21 10:39 p.m.20 views

Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret

Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret | Field | Value | | ---------------- | ----- | | Repository | Jovancoding/Network-AI | | Affected version | v5.4.4 commit c12686e181f231cf8d7bcf836a96d78f0f0877ac | Summary The MCP SSE server defaults to an empty secret...

7.6CVSS6AI score0.0017EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder