Skip to content
OpenAdvisories

Vendor

dropbox

9 known vulnerabilities.

Products

esaml 4 samly 2 merou 1 Dropbox Desktop 1 mcp-server-dash 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-81102

    Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation

    The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcp_server_dash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a na…

    dropbox mcp-server-dash