https://vulnerability.circl.lu/sightings/feed 2026-09-17T02:24:53.653766+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9a5346bf-1481-4854-9172-c7bfee928c4b/export 2026-09-17T02:24:53.677193+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9a5346bf-1481-4854-9172-c7bfee928c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://gist.github.com/alon710/53a2d29306b87115c0a5f70b93a57923", "content": "# CVE-2026-61560: CVE-2026-61560: Unauthenticated Remote Path Traversal and Access Token Exfiltration in @zereight/mcp-gitlab\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61560\n\n## Summary\nCVE-2026-61560 is a critical security vulnerability in the @zereight/mcp-gitlab Server-Sent Events (SSE) server. By utilizing default, unauthenticated route setups and exposing vulnerable administrative tools, remote attackers can execute path traversal attacks to read internal process variables and hijack GitLab operations.\n\n## TL;DR\nUnauthenticated remote attackers can read sensitive local container files and hijack GitLab accounts by abusing exposed Server-Sent Events endpoints and path traversal in the upload_markdown tool of @zereight/mcp-gitlab.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22 / CWE-306\n- **Attack Vector**: Network\n- **CVSS Score**: 9.8\n- **EPSS Score**: 0.00703\n- **EPSS Percentile**: 51.56%\n- **Exploit Status**: PoC / Conceptual\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- @zereight/mcp-gitlab\n- **@zereight/mcp-gitlab**: < 2.1.27 (Fixed in: `2.1.27`)\n\n## Mitigation\n\n- Enforce authentication on SSE transport by defining SSE_AUTH_TOKEN.\n- Bind the integration port exclusively to the local loopback interface (127.0.0.1).\n- Upgrade @zereight/mcp-gitlab to version 2.1.27 or higher.\n\n**Remediation Steps:**\n1. Verify the installed package version of @zereight/mcp-gitlab is 2.1.27 or higher.\n2. Configure the application host variable to HOST=127.0.0.1.\n3. Generate and apply a secure SSE_AUTH_TOKEN in the server environment variables.\n4. Review and rotate active GitLab Personal Access Tokens used by the deployment.\n\n## References\n\n- [GitHub Security Advisory GHSA-cv3r-c5h8-f4g5](https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-cv3r-c5h8-f4g5)\n- [Vulnerability Fix Commit](https://github.com/zereight/gitlab-mcp/commit/e436ee4ad067b64584ec9312c9e9c9a2641c1976)\n- [NVD CVE-2026-61560 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-61560)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61560) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-16T21:32:23.216791Z"} 2026-09-16T21:32:23.216791+00:00 https://vulnerability.circl.lu/sighting/9e38b03b-458c-4651-98af-9330df8b90b1/export 2026-09-17T02:24:53.679907+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9e38b03b-458c-4651-98af-9330df8b90b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/standup.thecompound.tech/post/3mvngk7lltj2t", "content": "CVE-2026-61560 lets unauthenticated network clients use @zereight/mcp-gitlab's SSE transport and upload_markdown to read /proc/self/environ, exposing GITLAB_PERSONAL_ACCESS_TOKEN and full account takeover. #software", "creation_timestamp": "2026-09-16T15:14:44.949354Z"} 2026-09-16T15:14:44.949354+00:00 https://vulnerability.circl.lu/sighting/991e3b84-8af1-4070-9841-25b31ee20ec1/export 2026-09-17T02:24:53.680141+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "991e3b84-8af1-4070-9841-25b31ee20ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvngk4s47j2g", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-61560: `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab\nCVSS 9.8 \u00b7 EPSS 0.7%\nhttps://beta.vulnsea.com/cve/CVE-2026-61560\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-16T15:14:41.170976Z"} 2026-09-16T15:14:41.170976+00:00 https://vulnerability.circl.lu/sighting/23f887fb-d47a-40c2-ada5-92b0f4a57a02/export 2026-09-17T02:24:53.680321+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "23f887fb-d47a-40c2-ada5-92b0f4a57a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-61560", "type": "published-proof-of-concept", "source": "https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-cv3r-c5h8-f4g5", "content": "", "creation_timestamp": "2026-09-16T14:35:02.125124Z"} 2026-09-16T14:35:02.125124+00:00 https://vulnerability.circl.lu/sighting/058e960e-0a43-4a21-bce0-fed949adcd77/export 2026-09-17T02:24:53.681626+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "058e960e-0a43-4a21-bce0-fed949adcd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmob3qgwf2g", "content": "CVE-2026-61560 - gitlab-mcp\nA default Docker setup of zereight/gitlab-mcp lets anyone on the network read any file on the server, including the file that stores the GitLab personal access token. By\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitlabmcp #zereight #CVE #infosec", "creation_timestamp": "2026-09-16T08:00:06.116177Z"} 2026-09-16T08:00:06.116177+00:00 https://vulnerability.circl.lu/sighting/9958d3f2-0cd1-41e8-8420-f3a7585167b1/export 2026-09-17T02:24:53.681748+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9958d3f2-0cd1-41e8-8420-f3a7585167b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvmcrehuyb2n", "content": "\ud83d\udea8 CVE-2026-61560 \u2014 CVSS 9.8 CRITICAL\n\n`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE tran...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61560\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-16T04:34:27.191644Z"} 2026-09-16T04:34:27.191644+00:00 https://vulnerability.circl.lu/sighting/0f6278fc-8de7-438a-bb6a-0317deaa76e1/export 2026-09-17T02:24:53.681846+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0f6278fc-8de7-438a-bb6a-0317deaa76e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmbbeytzw2f", "content": "\ud83d\udea8 CVE-2026-61560 \u2014 CVSS 9.8 CRITICAL\n\n`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE tran...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61560\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T04:07:36.917172Z"} 2026-09-16T04:07:36.917172+00:00