mcp-xray

MCP X-Ray Overview MCP X-Ray is a unified open-source security scanning and penetration testing solution for Model Context Protocol MCP servers. It generates production-ready SARIF reports for seamless integration with security tooling and CI/CD pipelines. Scan results can be optionally uploaded ...

agent-opfor

Open-source adversary emulation for AI agents, LLM apps, and MCP servers. Test your AI like a real attacker would — from your CLI, your IDE, or a browser extension that anyone on your team can use. Website · Docs · GitHub · Browser Extension · Discord OPFOR is short for Opposition Force — a...

CVE

CVE's Table CVE Number| Type| Company/Product| Description| Article Link| Repository Link ---|---|---|---|---|--- CVE-2026-9680| SQLi| Alibaba RDS MCP Servers| TBA| TBA| TBA CVE-2026-50335| LPE| Windows July 2026| TBA| TBA| TBA GHSA-73cv-556c-w3g6| SQLi| Apache Pinot MCP 3.1.0| Missing sanitizati...

pkgxray

pkgxray — seguridad previa a la instalación para paquetes npm, servidores MCP y agentes de IA Inspecciona un paquete npm o un servidor MCP antes de instalarlo o conectarte a él, y obtén un veredicto determinista respaldado por evidencia: SAFE, REVIEW o BLOCK. Análisis estático local y sin...

aimap

AIMap Internet-scale discovery and security testing platform for exposed AI agent infrastructure. AIMap finds, fingerprints, and security-tests publicly exposed AI endpoints — MCP servers, Ollama instances, vLLM/LiteLLM proxies, LangServe chains, Gradio apps, ComfyUI nodes, and more. Think Shodan...

agent-scan

Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: We don't publish an npm package for Agent Scan. Install it via uvx or as a standalone binary. Note: CLI output is experimental and subject to...

vulnerable-mcp-servers-lab

Laboratorio de Servidores MCP Vulnerables Este repositorio contiene implementaciones intencionalmente vulnerables de servidores del Model Context Protocol MCP tanto locales como remotos. Cada servidor se encuentra en su propia carpeta e incluye un README.md dedicado con todos los detalles sobre q...

skills

SpecterOps Skills Reusable agent skills, plugins, and agent definitions for SpecterOps. Use With Codex Each plugin includes a Codex manifest at .codex-plugin/plugin.json. codex plugin marketplace add /Users//Projects/skills or codex plugin marketplace add SpecterOps/skills Then open Codex and...

mcp-server-attestation

Part of theStudioMeyer MCP Stack — Built in Mallorca 🌴 · ⭐ if you use it mcp-server-attestation Layer-2 supply-chain hardening for Model Context Protocol servers. Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Direct response to: OX Security...

CVE-2026-103758

Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tool...

CVE-2026-103758

The Obot platform, versions 0.21.1 through 0.24.1 , is vulnerable to an authorization bypass because the checkUI deny list fails to include the /mcp-connect-composite/ route. This flaw allows authenticated users with basic-role privileges and a composite MCP ID to proxy requests via mcpGateway.Pr...

EUVD-2026-90687

Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tool...

CVE-2026-103758 Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route

Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tool...

LLM-MCP-Security-Field-Guide

🛡️ AI Security Field Guide — LLM + MCP Security The most comprehensive, up-to-date, practitioner-first security reference for LLM applications and Model Context Protocol MCP deployments. Covers real CVEs, live attack patterns, OWASP frameworks, red teaming tools, and actionable checklists — update...

CVE-2026-101084

Versions of obot prior to v0.21.1 are vulnerable to an authorization bypass due to a failure to enforce Access Control Rules on the /mcp-connect endpoint. Any authenticated user who possesses a specific server ID can connect to restricted MCP servers . This allows attackers to bypass authorizatio...

CVE-2026-101084 obot before v0.21.1 Authorization Bypass via /mcp-connect

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through...

CVE-2026-101084 obot before v0.21.1 Authorization Bypass via /mcp-connect

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through...

CVE-2026-101084 obot before v0.21.1 Authorization Bypass via /mcp-connect

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through...

PT-2026-99711

Name of the Vulnerable Software and Affected Versions Obot versions up to and including commit d7e6970 Description The Docker quickstart command starts the container listening on 0.0.0.0:8080 with authentication disabled by default. In this state, every request is mapped to a synthetic "nobody"...

CVE-2026-101065: Missing Authentication for Critical Function

Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped...