CVE-2026-81094

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

EUVD-2026-67022

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

CVE-2026-81094

CVE-2026-81094 affects the mcp-router CLI (prior to version 0.6.3). The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port and enforced authentication only when an explicit token flag was supplied. A default invocation therefore expose...

CVE-2026-81094 mcp-router CLI before 0.6.3 Binds the MCP Aggregator to All Interfaces Without Requiring Authentication

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

pocket_disasm

Pocket Disasm Ein MCP-Endpunkt. Viele isolierte IDALib-Sitzungen. Eine leichte, agentenzentrierte Steuerschicht für die kopflose Binäranalyse mit dem IDA Pro MCP-Toolset. !IMPORTANT Pocket Disasm ist ein unabhängiges Open-Source-Projekt. Es ist nicht mit Hex-Rays verbunden, wird nicht von Hex-Ray...