Skip to content
OpenAdvisories

Vendor

arikusi

2 known vulnerabilities.

Products

deepseek-mcp-server 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-55604

    @arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key

    DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.7.0, the process-global `SessionStore` accepts caller-supplied `session_id` values without binding them to any authenticated principal or transport session.…

    arikusi deepseek-mcp-server @arikusi/deepseek-mcp-server npm