Skip to content
OpenAdvisories

Product · andrea9293

mcp-documentation-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-54504

    MCP Documentation Server: Web UI API binds to all interfaces without authentication by default

    MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI in src/server.ts calls startWebServer in src/web-server.ts with START_WEB_UI enabled by d…

    andrea9293 mcp-documentation-server @andrea9293/mcp-documentation-server npm