Skip to content
OpenAdvisories

Package · PyPI

netlicensing-mcp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.6
    CVE-2026-57496

    NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction

    NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.8, netlicensing_get_product passes the caller-controlled product_number to src/netlicensi…

    Labs64 NetLicensing-MCP netlicensing-mcp PyPI
  • High 8.1
    CVE-2026-54446

    NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode

    NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Au…

    Labs64 NetLicensing-MCP netlicensing-mcp PyPI