Skip to content
OpenAdvisories

Vendor

pipeboard-co

3 known vulnerabilities.

Products

meta-ads-mcp 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2026-54549

    Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch

    Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the upload_ad_image tool in meta_ads_mcp/core/ads.py passes an attacker-controlled image_url to try_multiple_download_methods() in meta_ads_m…

    pipeboard-co meta-ads-mcp meta-ads-mcp PyPI
  • High 7.4
    CVE-2026-54547

    Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token

    Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in meta_ads_mcp/core/http_auth_integration.py rejects HTTP MCP requests only when both auth_token and pipeboard_token…

    pipeboard-co meta-ads-mcp meta-ads-mcp PyPI