Lucene search
+L

4414 matches found

Cvelist
Cvelist
added 2026/09/04 2:32 p.m.28 views

CVE-2026-85626 git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters

git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of gitlog, gitdiff, and gitshow tools that lack leading-dash validation. Attackers can inject git command-line options like --output= to write files outside the repository to arbitrary paths...

8.7CVSS0.0027EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/04 2:32 p.m.38 views

CVE-2026-85620 Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pgreadfile through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS0.00371EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/04 2:32 p.m.11 views

EUVD-2026-71227

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pgreadfile through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS5.6AI score0.00371EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/04 2:32 p.m.52 views

CVE-2026-85620

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass in its SQL validation layer. The root cause is that function-name validation is not applied to RangeFunction nodes in FROM clauses , allowing attackers to invoke file-reading functions such as pg_read_file via FROM-clause syntax and read ar...

9.2CVSS5.6AI score0.00371EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/04 2:32 p.m.18 views

CVE-2026-85620 Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pgreadfile through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS5.8AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/04 2:32 p.m.27 views

CVE-2026-85606 firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawlparse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like...

8.7CVSS0.00702EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/04 2:32 p.m.14 views

CVE-2026-85606

firecrawl-mcp-server version 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool. The root cause is the acceptance of unconstrained filePath arguments without directory containment validation, allowing an attacker to supply absolute paths or directory traversal ...

8.7CVSS5.5AI score0.00702EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/04 2:32 p.m.6 views

EUVD-2026-71222

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawlparse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like...

8.7CVSS5.5AI score0.00702EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/04 2:23 p.m.6 views

EUVD-2026-71215

IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration installation by spoofing X-Forwarded-For: 127.0.0.1 header, enabling arbitrary writes to IDE config files /.cursor/mcp.json, etc...

6.5CVSS5.5AI score0.00271EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/04 2:23 p.m.34 views

CVE-2026-9186

IBM Langflow OSS versions 1.0.0 through 1.11.2 contain an improper access control vulnerability (CWE-284) in the MCP configuration installation endpoint. The endpoint enforces a localhost-only restriction using a client IP helper that blindly trusts the X-Forwarded-For header without verifying th...

6.5CVSS5.5AI score0.00271EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/09/04 12:17 p.m.6 views

CVE-2026-85580

SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read the protected publishAccess.json file by requesting case-variant paths like PublishAccess.json to disclose sensitive...

7.1CVSS0.00526EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/04 11:29 a.m.36 views

CVE-2026-85580 SiYuan before v3.8.2 Path Guard Bypass via Case Mismatch

SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read the protected publishAccess.json file by requesting case-variant paths like PublishAccess.json to disclose sensitive...

7.1CVSS0.00526EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/04 11:29 a.m.9 views

CVE-2026-85580

SiYuan versions before v3.8.2 contain a path guard bypass in the MCP file-access handler , caused by case-sensitive matching on Linux filesystems. An attacker with low privileges can read the protected publishAccess.json file by requesting a case-variant path (e.g., PublishAccess.json), disclosin...

7.1CVSS5.2AI score0.00526EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/04 11:29 a.m.8 views

EUVD-2026-71003

SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read the protected publishAccess.json file by requesting case-variant paths like PublishAccess.json to disclose sensitive...

7.1CVSS5.4AI score0.00526EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/04 11:29 a.m.11 views

CVE-2026-85580 SiYuan before v3.8.2 Path Guard Bypass via Case Mismatch

SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read the protected publishAccess.json file by requesting case-variant paths like PublishAccess.json to disclose sensitive...

7.1CVSS5.5AI score
SaveExploits0References4
Snyk
Snyk
added 2026/09/04 6:31 a.m.6 views

Malicious Package

Overview mcp-consultasdeveiculos-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

9.8CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.12 views

PT-2026-85539

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like...

8.7CVSS5.5AI score0.00702EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.15 views

PT-2026-85550

git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git log, git diff, and git show tools that lack leading-dash validation. Attackers can inject git command-line options like --output= to write files outside the repository to arbitrary paths...

8.7CVSS5.4AI score0.0027EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.13 views

PT-2026-85554

excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL FILES PATH is unset, allowing attackers to read and write arbitrary files. Attackers can supply unchecked file paths to read and write tools to access any file accessible to the process...

9.8CVSS5.5AI score0.00441EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.16 views

PT-2026-85544

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pg read file through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS5.6AI score0.00371EPSS
SaveExploits0References9
Rows per page
Query Builder