Skip to content
OpenAdvisories

Vendor

contentful

1 known vulnerabilities.

Products

contentful-mcp-server 1 mcp-server 1 mcp-tools 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-53957

    Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint

    Contentful MCP Server is a Model Context Protocol server for the Contentful Management API. Prior to @contentful/mcp-server 1.7.19 and @contentful/mcp-tools 0.4.5, export_space and import_space in packages/mcp-tools/src/tools/jobs/space-to-space-migration/exp…

    contentful mcp-server contentful-mcp-server mcp-tools npm