https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 02:24:49 +0000 https://vulnerability.circl.lu/sighting/9a5346bf-1481-4854-9172-c7bfee928c4b/export {"uuid": "9a5346bf-1481-4854-9172-c7bfee928c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://gist.github.com/alon710/53a2d29306b87115c0a5f70b93a57923", "content": "# CVE-2026-61560: CVE-2026-61560: Unauthenticated Remote Path Traversal and Access Token Exfiltration in @zereight/mcp-gitlab\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61560\n\n## Summary\nCVE-2026-61560 is a critical security vulnerability in the @zereight/mcp-gitlab Server-Sent Events (SSE) server. By utilizing default, unauthenticated route setups and exposing vulnerable administrative tools, remote attackers can execute path traversal attacks to read internal process variables and hijack GitLab operations.\n\n## TL;DR\nUnauthenticated remote attackers can read sensitive local container files and hijack GitLab accounts by abusing exposed Server-Sent Events endpoints and path traversal in the upload_markdown tool of @zereight/mcp-gitlab.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22 / CWE-306\n- **Attack Vector**: Network\n- **CVSS Score**: 9.8\n- **EPSS Score**: 0.00703\n- **EPSS Percentile**: 51.56%\n- **Exploit Status**: PoC / Conceptual\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- @zereight/mcp-gitlab\n- **@zereight/mcp-gitlab**: < 2.1.27 (Fixed in: `2.1.27`)\n\n## Mitigation\n\n- Enforce authentication on SSE transport by defining SSE_AUTH_TOKEN.\n- Bind the integration port exclusively to the local loopback interface (127.0.0.1).\n- Upgrade @zereight/mcp-gitlab to version 2.1.27 or higher.\n\n**Remediation Steps:**\n1. Verify the installed package version of @zereight/mcp-gitlab is 2.1.27 or higher.\n2. Configure the application host variable to HOST=127.0.0.1.\n3. Generate and apply a secure SSE_AUTH_TOKEN in the server environment variables.\n4. Review and rotate active GitLab Personal Access Tokens used by the deployment.\n\n## References\n\n- [GitHub Security Advisory GHSA-cv3r-c5h8-f4g5](https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-cv3r-c5h8-f4g5)\n- [Vulnerability Fix Commit](https://github.com/zereight/gitlab-mcp/commit/e436ee4ad067b64584ec9312c9e9c9a2641c1976)\n- [NVD CVE-2026-61560 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-61560)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61560) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-16T21:32:23.216791Z"} {"uuid": "9a5346bf-1481-4854-9172-c7bfee928c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://gist.github.com/alon710/53a2d29306b87115c0a5f70b93a57923", "content": "# CVE-2026-61560: CVE-2026-61560: Unauthenticated Remote Path Traversal and Access Token Exfiltration in @zereight/mcp-gitlab\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61560\n\n## Summary\nCVE-2026-61560 is a critical security vulnerability in the @zereight/mcp-gitlab Server-Sent Events (SSE) server. By utilizing default, unauthenticated route setups and exposing vulnerable administrative tools, remote attackers can execute path traversal attacks to read internal process variables and hijack GitLab operations.\n\n## TL;DR\nUnauthenticated remote attackers can read sensitive local container files and hijack GitLab accounts by abusing exposed Server-Sent Events endpoints and path traversal in the upload_markdown tool of @zereight/mcp-gitlab.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22 / CWE-306\n- **Attack Vector**: Network\n- **CVSS Score**: 9.8\n- **EPSS Score**: 0.00703\n- **EPSS Percentile**: 51.56%\n- **Exploit Status**: PoC / Conceptual\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- @zereight/mcp-gitlab\n- **@zereight/mcp-gitlab**: < 2.1.27 (Fixed in: `2.1.27`)\n\n## Mitigation\n\n- Enforce authentication on SSE transport by defining SSE_AUTH_TOKEN.\n- Bind the integration port exclusively to the local loopback interface (127.0.0.1).\n- Upgrade @zereight/mcp-gitlab to version 2.1.27 or higher.\n\n**Remediation Steps:**\n1. Verify the installed package version of @zereight/mcp-gitlab is 2.1.27 or higher.\n2. Configure the application host variable to HOST=127.0.0.1.\n3. Generate and apply a secure SSE_AUTH_TOKEN in the server environment variables.\n4. Review and rotate active GitLab Personal Access Tokens used by the deployment.\n\n## References\n\n- [GitHub Security Advisory GHSA-cv3r-c5h8-f4g5](https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-cv3r-c5h8-f4g5)\n- [Vulnerability Fix Commit](https://github.com/zereight/gitlab-mcp/commit/e436ee4ad067b64584ec9312c9e9c9a2641c1976)\n- [NVD CVE-2026-61560 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-61560)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61560) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-16T21:32:23.216791Z"} https://vulnerability.circl.lu/sighting/9a5346bf-1481-4854-9172-c7bfee928c4b/export Wed, 16 Sep 2026 21:32:23 +0000 https://vulnerability.circl.lu/sighting/9e38b03b-458c-4651-98af-9330df8b90b1/export {"uuid": "9e38b03b-458c-4651-98af-9330df8b90b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/standup.thecompound.tech/post/3mvngk7lltj2t", "content": "CVE-2026-61560 lets unauthenticated network clients use @zereight/mcp-gitlab's SSE transport and upload_markdown to read /proc/self/environ, exposing GITLAB_PERSONAL_ACCESS_TOKEN and full account takeover. #software", "creation_timestamp": "2026-09-16T15:14:44.949354Z"} {"uuid": "9e38b03b-458c-4651-98af-9330df8b90b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/standup.thecompound.tech/post/3mvngk7lltj2t", "content": "CVE-2026-61560 lets unauthenticated network clients use @zereight/mcp-gitlab's SSE transport and upload_markdown to read /proc/self/environ, exposing GITLAB_PERSONAL_ACCESS_TOKEN and full account takeover. #software", "creation_timestamp": "2026-09-16T15:14:44.949354Z"} https://vulnerability.circl.lu/sighting/9e38b03b-458c-4651-98af-9330df8b90b1/export Wed, 16 Sep 2026 15:14:44 +0000 https://vulnerability.circl.lu/sighting/991e3b84-8af1-4070-9841-25b31ee20ec1/export {"uuid": "991e3b84-8af1-4070-9841-25b31ee20ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvngk4s47j2g", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-61560: `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab\nCVSS 9.8 \u00b7 EPSS 0.7%\nhttps://beta.vulnsea.com/cve/CVE-2026-61560\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-16T15:14:41.170976Z"} {"uuid": "991e3b84-8af1-4070-9841-25b31ee20ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvngk4s47j2g", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-61560: `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab\nCVSS 9.8 \u00b7 EPSS 0.7%\nhttps://beta.vulnsea.com/cve/CVE-2026-61560\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-16T15:14:41.170976Z"} https://vulnerability.circl.lu/sighting/991e3b84-8af1-4070-9841-25b31ee20ec1/export Wed, 16 Sep 2026 15:14:41 +0000 https://vulnerability.circl.lu/sighting/23f887fb-d47a-40c2-ada5-92b0f4a57a02/export {"uuid": "23f887fb-d47a-40c2-ada5-92b0f4a57a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-61560", "type": "published-proof-of-concept", "source": "https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-cv3r-c5h8-f4g5", "content": "", "creation_timestamp": "2026-09-16T14:35:02.125124Z"} {"uuid": "23f887fb-d47a-40c2-ada5-92b0f4a57a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-61560", "type": "published-proof-of-concept", "source": "https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-cv3r-c5h8-f4g5", "content": "", "creation_timestamp": "2026-09-16T14:35:02.125124Z"} https://vulnerability.circl.lu/sighting/23f887fb-d47a-40c2-ada5-92b0f4a57a02/export Wed, 16 Sep 2026 14:35:02 +0000 https://vulnerability.circl.lu/sighting/058e960e-0a43-4a21-bce0-fed949adcd77/export {"uuid": "058e960e-0a43-4a21-bce0-fed949adcd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmob3qgwf2g", "content": "CVE-2026-61560 - gitlab-mcp\nA default Docker setup of zereight/gitlab-mcp lets anyone on the network read any file on the server, including the file that stores the GitLab personal access token. By\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitlabmcp #zereight #CVE #infosec", "creation_timestamp": "2026-09-16T08:00:06.116177Z"} {"uuid": "058e960e-0a43-4a21-bce0-fed949adcd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmob3qgwf2g", "content": "CVE-2026-61560 - gitlab-mcp\nA default Docker setup of zereight/gitlab-mcp lets anyone on the network read any file on the server, including the file that stores the GitLab personal access token. By\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitlabmcp #zereight #CVE #infosec", "creation_timestamp": "2026-09-16T08:00:06.116177Z"} https://vulnerability.circl.lu/sighting/058e960e-0a43-4a21-bce0-fed949adcd77/export Wed, 16 Sep 2026 08:00:06 +0000 https://vulnerability.circl.lu/sighting/9958d3f2-0cd1-41e8-8420-f3a7585167b1/export {"uuid": "9958d3f2-0cd1-41e8-8420-f3a7585167b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvmcrehuyb2n", "content": "\ud83d\udea8 CVE-2026-61560 \u2014 CVSS 9.8 CRITICAL\n\n`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE tran...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61560\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-16T04:34:27.191644Z"} {"uuid": "9958d3f2-0cd1-41e8-8420-f3a7585167b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvmcrehuyb2n", "content": "\ud83d\udea8 CVE-2026-61560 \u2014 CVSS 9.8 CRITICAL\n\n`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE tran...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61560\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-16T04:34:27.191644Z"} https://vulnerability.circl.lu/sighting/9958d3f2-0cd1-41e8-8420-f3a7585167b1/export Wed, 16 Sep 2026 04:34:27 +0000 https://vulnerability.circl.lu/sighting/0f6278fc-8de7-438a-bb6a-0317deaa76e1/export {"uuid": "0f6278fc-8de7-438a-bb6a-0317deaa76e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmbbeytzw2f", "content": "\ud83d\udea8 CVE-2026-61560 \u2014 CVSS 9.8 CRITICAL\n\n`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE tran...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61560\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T04:07:36.917172Z"} {"uuid": "0f6278fc-8de7-438a-bb6a-0317deaa76e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61560", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmbbeytzw2f", "content": "\ud83d\udea8 CVE-2026-61560 \u2014 CVSS 9.8 CRITICAL\n\n`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE tran...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61560\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T04:07:36.917172Z"} https://vulnerability.circl.lu/sighting/0f6278fc-8de7-438a-bb6a-0317deaa76e1/export Wed, 16 Sep 2026 04:07:36 +0000