{"id":"EUVD-2026-79999","enisaUuid":"f60da758-f3ac-3601-8d7a-ce6031b0bbd5","description":"`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a victim\u0027s local MCP listener while preserving an attacker-controlled `Host` and `Origin`. The server accepts those headers and reaches the MCP initialization path instead of rejecting the request at the HTTP boundary. Version 2.1.30 contains a patch.","datePublished":"Sep 15, 2026, 8:56:11 PM","dateUpdated":"Sep 16, 2026, 6:36:39 PM","baseScore":9.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":"https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-vmp7-252j-cwp7\nhttps://github.com/zereight/gitlab-mcp/pull/555\nhttps://github.com/zereight/gitlab-mcp/commit/52207c6f5c0e7a39e9235d491225edbb562a0290\nhttps://github.com/zereight/gitlab-mcp/releases/tag/v2.1.30\n","aliases":"CVE-2026-61568\nGHSA-vmp7-252j-cwp7\n","assigner":"GitHub_M","epss":0.53,"enisaIdProduct":[{"id":"d2167ed3-4159-3409-9edc-bff889df3237","product":{"name":"gitlab-mcp","vendor":{"name":"zereight"}},"product_version":"\u003c 2.1.30"}],"enisaIdVendor":[{"id":"ead1655b-57a0-3ad7-ab49-15778a2a2f79","vendor":{"name":"zereight"}}],"enisaIdVulnerability":[{"id":"48836d95-e548-3ef8-9439-c9af84c32a46","vulnerability":{"id":"GHSA-vmp7-252j-cwp7","description":"@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport","datePublished":"Sep 15, 2026, 8:54:55 PM","dateUpdated":"Sep 15, 2026, 8:54:55 PM","baseScore":0.0,"references":"https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-vmp7-252j-cwp7\nhttps://github.com/zereight/gitlab-mcp/pull/555\nhttps://github.com/zereight/gitlab-mcp/commit/52207c6f5c0e7a39e9235d491225edbb562a0290\nhttps://github.com/zereight/gitlab-mcp\nhttps://github.com/zereight/gitlab-mcp/releases/tag/v2.1.30\n","enisa_id":"EUVD-2026-79999\n","aliases":"GHSA-vmp7-252j-cwp7\nCVE-2026-61568\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:53:05 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"93153a2b-be7f-3038-9796-125aab38fad1","vulnerability":{"id":"CVE-2026-61568","description":"`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a victim\u0027s local MCP listener while preserving an attacker-controlled `Host` and `Origin`. The server accepts those headers and reaches the MCP initialization path instead of rejecting the request at the HTTP boundary. Version 2.1.30 contains a patch.","datePublished":"Sep 15, 2026, 8:56:11 PM","dateUpdated":"Sep 16, 2026, 6:36:39 PM","status":"PUBLISHED","baseScore":9.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":"https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-vmp7-252j-cwp7\nhttps://github.com/zereight/gitlab-mcp/pull/555\nhttps://github.com/zereight/gitlab-mcp/commit/52207c6f5c0e7a39e9235d491225edbb562a0290\nhttps://github.com/zereight/gitlab-mcp/releases/tag/v2.1.30\n","enisa_id":"EUVD-2026-79999\n","assigner":"GitHub_M","epss":0.53,"dataProcessed":"Nov 11, 2026, 7:20:34 AM","vulnerabilityProduct":[{"id":"3c93143a-d2e7-34d1-b10e-4a953f81fb92","product":{"name":"gitlab-mcp","vendor":{"name":"zereight"}},"product_version":"\u003c 2.1.30"}],"vulnerabilityVendor":[{"id":"7c294364-67dd-3e2b-8c39-2d1e085897ce","vendor":{"name":"zereight"}}]}}],"enisaIdAdvisory":[]}