Skip to content
OpenAdvisories

Vendor

mcp-use

1 known vulnerabilities.

Products

mcp-use 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-81091

    mcp-use Inspector Proxy Server-Side Request Forgery via Caller-Supplied Target URL

    The proxy middleware in mcp-use's inspector forwards requests to a destination the caller names. mountMcpProxy in libraries/typescript/packages/inspector/src/server/proxy/mcp-proxy.ts read the target from the X-Target-URL header or the __mcp_target parameter …

    mcp-use mcp-use