Skip to content
OpenAdvisories

Vendor

nhost

5 known vulnerabilities.

Products

nhost 4 cli 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-34200 Public exploit

    Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Port

    Nhost is an open source Firebase alternative with GraphQL. Prior to version 1.41.0, The Nhost CLI MCP server, when explicitly configured to listen on a network port, applies no inbound authentication and does not enforce strict CORS. This allows a malicious w…

    nhost nhost