MCP-Inspector-CVE-2025-49596

MCP Inspector CVE-2025-49596 漏洞检测器 该脚本用于检测 MCP Inspector 服务器是否受到 CVE-2025-49596 漏洞影响，该安全问题表现为 /sse 端点响应未经身份验证的请求（缺少身份验证令牌）。 工作原理 脚本向目标 MCP Inspector 服务器的 /sse 端点发送 GET 请求。 检查响应： 如果服务器返回 HTTP 200 OK 且未要求提供身份验证令牌 ，则很可能存在漏洞。 如果服务器返回 HTTP 401 Unauthorized，则很可能已修补（v0.14.1+）。 其他响应则报告为意外情况。 依赖要求 Python...

CVE-2026-45019 Chainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network access

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authentication. For sse and streamable-http...

PT-2026-71083

An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to Server-Sent Events SSE streams through the /pubsub/subscribe/ endpoint. The token required decorator used by the Pub/Sub interface authenticated requests solely by matching the...

CVE-2026-63732

9router 0.4.59 fixed in 0.4.60 contains a chain of vulnerabilities: a hardcoded default password 123456 that authenticates any fresh installation, a bypass of the LOCALONLY network gate via a spoofed Host header, and unvalidated arguments passed to childprocess.spawn when registering MCP plugins....

CVE-2026-56280

Cap-go before 12.128.2 contains a privilege inversion vulnerability in GET /build/logs/:jobId that allows read-only API key holders to cancel running native builds. The endpoint registers an abort listener on the SSE stream that unconditionally invokes cancelBuildOnDisconnect using the privileged...

CVE-2026-30968

Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint /sse/v1/... in Coral Server did not strongly validate that a connecting agent was a legitimate participant in the session. Th...

oatpp-mcp 安全特征问题漏洞

oatpp-mcp is an Oat++ open source implementation of the Model Context Protocol. A security signature issue vulnerability exists in oatpp-mcp that stems from an MCP SSE endpoint returning an instance pointer as a session ID, which could lead to a session hijacking attack...