Lucene search
+L

2 matches found

osv_pysec
osv_pysec
•added 2026/07/13 2:36 p.m.•39 views

PYSEC-2026-2623 mcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint

Summary The /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCPALLOWANONYMOUSACCESS=true is set required for the HTTP server to function without OAuth/API key,...

5.3CVSS5.9AI score0.00411EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•36 views

PT-2026-59276

Summary The /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCP ALLOW ANONYMOUS ACCESS=true is set required for the HTTP server to function without OAuth/API...

5.3CVSS5.9AI score0.00411EPSS
SaveExploits1References7
Rows per page
Query Builder