{"id":"EUVD-2026-78590","enisaUuid":"5f6a5ed7-cfc5-3faa-bde3-23d4960d7496","description":"Contentful MCP Server is a Model Context Protocol server for the Contentful Management API. Prior to @contentful/mcp-server 1.7.19 and @contentful/mcp-tools 0.4.5, export_space and import_space in packages/mcp-tools/src/tools/jobs/space-to-space-migration/exportSpace.ts and packages/mcp-tools/src/tools/jobs/space-to-space-migration/importSpace.ts expose host, proxy, rawProxy, and insecure network options to LLM-controlled tool arguments and combine those options with the server\u0027s CONTENTFUL_MANAGEMENT_TOKEN. After space_to_space_migration_handler enables the migration tools, a direct MCP call or prompt injection through attacker-controlled Contentful content can redirect Contentful Management API requests and their Authorization header to an attacker-controlled host or proxy. The regular tools that use createToolClient are unaffected because those tools pin the host from server configuration. Exposure of the personal access token permits persistent out-of-band access to every Contentful space within the token\u0027s scope. This issue is fixed in @contentful/mcp-server 1.7.19 and @contentful/mcp-tools 0.4.5.","datePublished":"Sep 15, 2026, 2:34:53 PM","dateUpdated":"Sep 17, 2026, 2:32:11 PM","baseScore":7.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","references":"https://github.com/contentful/contentful-mcp-server/security/advisories/GHSA-2xhg-73j7-rrgx\nhttps://github.com/contentful/contentful-mcp-server/pull/376\nhttps://github.com/contentful/contentful-mcp-server/commit/fa7477ee48515f4248bc91a025eab0ca83423fe0\nhttps://github.com/contentful/contentful-mcp-server/releases/tag/mcp-server@1.7.19\nhttps://github.com/contentful/contentful-mcp-server/releases/tag/mcp-tools@0.4.5\n","aliases":"CVE-2026-53957\nGHSA-2xhg-73j7-rrgx\n","assigner":"GitHub_M","epss":0.42,"enisaIdProduct":[{"id":"0e2e06c6-90af-373c-8587-8bface242859","product":{"name":"mcp-server","vendor":{"name":"@contentful"}},"product_version":"\u003c 1.7.19"},{"id":"2a9852fb-ee38-3137-a9ff-c80f71e50dfd","product":{"name":"contentful-mcp-server","vendor":{"name":"contentful"}},"product_version":"\u003c 1.7.19"},{"id":"7c7987c5-230e-3179-94ae-4654e60f7c42","product":{"name":"mcp-tools","vendor":{"name":"@contentful"}},"product_version":"\u003c 0.4.5"}],"enisaIdVendor":[{"id":"40fdaf11-77a4-350e-acdc-84e24c753708","vendor":{"name":"contentful"}},{"id":"c82e0ab3-4217-3099-b20d-e10699141b8a","vendor":{"name":"@contentful"}}],"enisaIdVulnerability":[{"id":"95c63dba-0ad8-37de-bdb1-4a9c0aba2d5b","vulnerability":{"id":"GHSA-2xhg-73j7-rrgx","description":"Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint","datePublished":"Aug 19, 2026, 7:17:00 PM","dateUpdated":"Aug 19, 2026, 7:17:00 PM","baseScore":0.0,"references":"https://github.com/contentful/contentful-mcp-server/security/advisories/GHSA-2xhg-73j7-rrgx\nhttps://github.com/contentful/contentful-mcp-server/pull/376\nhttps://github.com/contentful/contentful-mcp-server/commit/fa7477ee48515f4248bc91a025eab0ca83423fe0\nhttps://github.com/contentful/contentful-mcp-server\nhttps://github.com/contentful/contentful-mcp-server/releases/tag/mcp-server%401.7.19\nhttps://github.com/contentful/contentful-mcp-server/releases/tag/mcp-tools%400.4.5\n","enisa_id":"EUVD-2026-78590\n","aliases":"GHSA-2xhg-73j7-rrgx\nCVE-2026-53957\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:59:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"eaba9afc-cb45-3fe0-8f13-70ea65f43121","vulnerability":{"id":"CVE-2026-53957","description":"Contentful MCP Server is a Model Context Protocol server for the Contentful Management API. Prior to @contentful/mcp-server 1.7.19 and @contentful/mcp-tools 0.4.5, export_space and import_space in packages/mcp-tools/src/tools/jobs/space-to-space-migration/exportSpace.ts and packages/mcp-tools/src/tools/jobs/space-to-space-migration/importSpace.ts expose host, proxy, rawProxy, and insecure network options to LLM-controlled tool arguments and combine those options with the server\u0027s CONTENTFUL_MANAGEMENT_TOKEN. After space_to_space_migration_handler enables the migration tools, a direct MCP call or prompt injection through attacker-controlled Contentful content can redirect Contentful Management API requests and their Authorization header to an attacker-controlled host or proxy. The regular tools that use createToolClient are unaffected because those tools pin the host from server configuration. Exposure of the personal access token permits persistent out-of-band access to every Contentful space within the token\u0027s scope. This issue is fixed in @contentful/mcp-server 1.7.19 and @contentful/mcp-tools 0.4.5.","datePublished":"Sep 15, 2026, 2:34:53 PM","dateUpdated":"Sep 17, 2026, 2:32:11 PM","status":"PUBLISHED","baseScore":7.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","references":"https://github.com/contentful/contentful-mcp-server/security/advisories/GHSA-2xhg-73j7-rrgx\nhttps://github.com/contentful/contentful-mcp-server/pull/376\nhttps://github.com/contentful/contentful-mcp-server/commit/fa7477ee48515f4248bc91a025eab0ca83423fe0\nhttps://github.com/contentful/contentful-mcp-server/releases/tag/mcp-server@1.7.19\nhttps://github.com/contentful/contentful-mcp-server/releases/tag/mcp-tools@0.4.5\n","enisa_id":"EUVD-2026-78590\n","assigner":"GitHub_M","epss":0.42,"dataProcessed":"Oct 28, 2026, 7:16:16 AM","vulnerabilityProduct":[{"id":"371350d9-1083-3681-b62f-ea614b26efc6","product":{"name":"mcp-server","vendor":{"name":"@contentful"}},"product_version":"\u003c 1.7.19"},{"id":"c8615e61-8d91-3aec-abdd-46125d92e88a","product":{"name":"mcp-tools","vendor":{"name":"@contentful"}},"product_version":"\u003c 0.4.5"},{"id":"dbcd6180-6cbc-308f-991a-d8f58f5c7dc9","product":{"name":"contentful-mcp-server","vendor":{"name":"contentful"}},"product_version":"\u003c 1.7.19"}],"vulnerabilityVendor":[{"id":"66cadc59-4ba1-31e1-bcbf-d43ecf0b1adf","vendor":{"name":"contentful"}},{"id":"c414e58a-33c6-3af1-b925-b00f580ce29b","vendor":{"name":"@contentful"}}]}}],"enisaIdAdvisory":[]}