nightingale

Open-Source Alerting Expert English | 中文 🎯 What is Nightingale Nightingale is an open-source monitoring project that focuses on alerting. Similar to Grafana, Nightingale also connects with various existing data sources. However, while Grafana emphasizes visualization, Nightingale places greater...

CVE-2026-33032

CVE-2026-33032 / MCPwn Non-destructive detection tooling for the nginx-ui MCP authentication bypass known publicly as MCPwn. Ship a two-HTTP-request unauthenticated takeover of any nginx-ui instance running a vulnerable version. Table of Contents 1. Quick Facts 2. Vulnerability Overview 3...

siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization

CVE-2026-66012 — SiYuan MCP Unauthenticated Administrator Takeover Proof of Concept for CVE-2026-66012 CVSS 10.0 Critical, a missing-authorization vulnerability in SiYuan's MCP Model Context Protocol endpoint that allows an unauthenticated attacker to achieve administrator takeover and remote cod...

Security Bulletin: Langflow is vulnerable to authentication bypass and insufficient session expiration

Summary Langflow provides API key-based authentication for programmatic access to flow execution and MCP endpoints. The MCP HTTP API credential resolvers do not apply the same AUTOLOGIN API-key guard that all standard authenticated endpoints enforce; when Langflow is in its default AUTOLOGIN...

cve-2026-33032-scanner

CVE-2026-33032 Scanner Non-destructive vulnerability scanner for Nginx-UI MCP Endpoint Authentication Bypass Vulnerability Overview CVE-2026-33032 is an authentication bypass vulnerability in nginx-ui's Model Context Protocol MCP integration. The /mcpmessage endpoint lacks authentication middlewa...

CVE-2026-59822

A flaw was found in LiteLLM, a proxy server designed for Large Language Model LLM APIs. An unauthenticated attacker could exploit a vulnerability in the MCP Streamable HTTP endpoint. By using a fabricated Authorization header, the attacker could bypass the standard key validation, gaining...

CVE-2026-45018

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authentication. For stdio transport, the...

CVE-2026-45019

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authentication. For sse and streamable-http...

CVE-2026-45019

Chainlit (a Python framework for building conversational AI applications) is affected by an SSRF vulnerability in its MCP integration. From version 2.4.0rc0 to 2.12.0 , deployments with features.mcp.enabled = true expose the POST /mcp endpoint without authentication. For SSE and streamable-http t...

EUVD-2026-42717

@arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint...

PT-2026-81492

Name of the Vulnerable Software and Affected Versions Chainlit versions 2.4.0rc0 through 2.11.x Description Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the 'POST /mcp' endpoint without authentication. The ConnectSseMCPRequest and...

PT-2026-81486

Name of the Vulnerable Software and Affected Versions Chainlit versions 2.4.0rc0 through 2.11.9 Description Deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the 'POST /mcp' endpoint without authentication. For stdio transport, the endpoint accepts a user-controlle...

PT-2026-66665

An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versions up to and including 1.4.0 allows an unauthenticated attacker to cause a denial of service DoS. The /mcp endpoint handler reads incoming payloads directly into system memory using a...

CVE-2026-66012

SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth check model.CheckAuth with no admin-role or read-only enforcement. This exposes 31 MCP tools, including a file tool with list/read/write/delete/rename/copy...

EUVD-2026-49043

SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth check model.CheckAuth with no admin-role or read-only enforcement. This exposes 31 MCP tools, including a file tool with list/read/write/delete/rename/copy...

CVE-2026-66012 SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP

SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth check model.CheckAuth with no admin-role or read-only enforcement. This exposes 31 MCP tools, including a file tool with list/read/write/delete/rename/copy...

CVE-2026-66012 SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP

SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth check model.CheckAuth with no admin-role or read-only enforcement. This exposes 31 MCP tools, including a file tool with list/read/write/delete/rename/copy...

PT-2026-64762

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.2 Description A missing authorization issue exists in the 'POST /mcp' kernel endpoint, which is only protected by a general authentication check model.CheckAuth without enforcing admin roles or read-only...

EUVD-2026-42359

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback...

CVE-2026-55605 @arikusi/deepseek-mcp-server Missing Authentication on Self-Hosted HTTP MCP Endpoint

DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.8.0, the self-hosted HTTP transport of @arikusi/deepseek-mcp-server exposes POST /mcp without any authentication: createMcpExpressApp is called without an authProvider and no middleware guards t...