Skip to content
OpenAdvisories

Package · Go

github.com/stacklok/toolhive

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.8
    CVE-2026-58197

    ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement

    ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol servers. Prior to ToolHive CLI 0.30.1 and ToolHive Studio 0.38.0, locally run MCP server containers use the default network permission profile without network i…

    stacklok toolhive toolhive-studio github.com/stacklok/toolhive Go
  • Medium 4.7
    CVE-2026-58196

    ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)

    ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Prior to 0.31.0, remote.Handler.Authenticate in pkg/auth/remote/handler.go invokes discovery.DetectAuthenticationFromServer in pkg/auth/discovery…

    stacklok toolhive github.com/stacklok/toolhive Go
  • Low 2.9
    CVE-2026-54450

    ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway

    ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Prior to 0.29.1, networking.IsPrivateIP in pkg/networking/utilities.go omits the IPv6 NAT64 prefixes 64:ff9b::/96 and 64:ff9b:1::/48, so NAT64 ad…

    stacklok toolhive github.com/stacklok/toolhive Go