Skip to content
OpenAdvisories

Package · Go

github.com/stacklok/toolhive

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-58197

    ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement

    ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol servers. Prior to ToolHive CLI 0.30.1 and ToolHive Studio 0.38.0, locally run MCP server containers use the default network permission profile without network i…

    stacklok toolhive toolhive-studio github.com/stacklok/toolhive Go