Lucene search
+L

2 matches found

OSV
OSV
•added 2026/07/13 2:36 p.m.•26 views

PYSEC-2026-2623 mcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint

Summary The /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCPALLOWANONYMOUSACCESS=true is set required for the HTTP server to function without OAuth/API key,...

5.3CVSS6AI score0.00425EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•31 views

PT-2026-59276

Summary The /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCP ALLOW ANONYMOUS ACCESS=true is set required for the HTTP server to function without OAuth/API...

5.3CVSS6.1AI score0.00425EPSS
SaveExploits1References7
Rows per page
Query Builder