{"id":"EUVD-2026-30491","enisaUuid":"64fc788e-2444-322d-b663-dffea7eb058b","description":"The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. From 1.1.0 to 1.7.4, the TrailingSlashMiddleware in internal/api/server.go is vulnerable to an open redirect attack. An attacker can craft a URL with a protocol-relative path (e.g., //evil.com/) that, after trailing slash removal, results in a Location header of //evil.com — which browsers interpret as an absolute URL to an external domain. This vulnerability is fixed in 1.7.5.","datePublished":"May 14, 2026, 9:07:34 PM","dateUpdated":"May 15, 2026, 1:33:16 PM","baseScore":null,"references":"https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-v8vw-gw5j-w7m6\n","aliases":"CVE-2026-44427\nGHSA-v8vw-gw5j-w7m6\n","assigner":"GitHub_M","epss":0.47,"enisaIdProduct":[{"id":"dc4fbc35-296e-3604-81e8-db5530b72cd1","product":{"name":"registry","vendor":{"name":"modelcontextprotocol"}},"product_version":"1.1.0, \u003c 1.7.5"}],"enisaIdVendor":[{"id":"3a85d985-9c54-3225-9c41-e59c3fa02171","vendor":{"name":"modelcontextprotocol"}}],"enisaIdVulnerability":[{"id":"292df6e1-5118-38ea-aeeb-b150889c215f","vulnerability":{"id":"GHSA-v8vw-gw5j-w7m6","description":"MCP Registry has open redirect via protocol-relative path in trailing-slash middleware","datePublished":"May 8, 2026, 5:02:12 PM","dateUpdated":"May 15, 2026, 11:47:07 PM","baseScore":0.0,"references":"https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-v8vw-gw5j-w7m6\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44427\nhttps://github.com/modelcontextprotocol/registry/pull/1227\nhttps://github.com/modelcontextprotocol/registry/commit/1201cbd82b2cf6d4b56edfc05c763059a12f9fdb\nhttps://github.com/modelcontextprotocol/registry\nhttps://github.com/modelcontextprotocol/registry/releases/tag/v1.7.5\n","enisa_id":"EUVD-2026-30491\n","aliases":"GHSA-v8vw-gw5j-w7m6\nCVE-2026-44427\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"a82c67cf-a8ab-3054-a661-6499bbd21f80","vulnerability":{"id":"CVE-2026-44427","description":"The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. From 1.1.0 to 1.7.4, the TrailingSlashMiddleware in internal/api/server.go is vulnerable to an open redirect attack. An attacker can craft a URL with a protocol-relative path (e.g., //evil.com/) that, after trailing slash removal, results in a Location header of //evil.com — which browsers interpret as an absolute URL to an external domain. This vulnerability is fixed in 1.7.5.","datePublished":"May 14, 2026, 9:07:34 PM","dateUpdated":"May 15, 2026, 1:33:16 PM","status":"PUBLISHED","baseScore":0.0,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-v8vw-gw5j-w7m6\n","enisa_id":"EUVD-2026-30491\n","assigner":"GitHub_M","epss":0.47,"dataProcessed":"Oct 28, 2026, 7:17:27 AM","vulnerabilityProduct":[{"id":"60dfa3d6-c872-3fa5-98af-69b4f8e56a47","product":{"name":"registry","vendor":{"name":"modelcontextprotocol"}},"product_version":"1.1.0, \u003c 1.7.5"}],"vulnerabilityVendor":[{"id":"bb9b9cf6-2671-3c9b-8850-ae28f8ec7aef","vendor":{"name":"modelcontextprotocol"}}]}}],"enisaIdAdvisory":[]}