Skip to content
OpenAdvisories

Package · npm

@agenticmail/mcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.7
    CVE-2026-50287

    Missing Authentication for Critical Function in @agenticmail/mcp

    AgenticMail gives AI agents real email addresses and phone numbers. Prior to version 0.9.27, @agenticmail/mcp exposes a Streamable HTTP transport when started with --http or MCP_HTTP=1. In that mode, the /mcp endpoint accepts requests without any HTTP authent…

    agenticmail agenticmail @agenticmail/mcp npm