Skip to content
OpenAdvisories

Product · Rapid7

Platform

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2026-97228

    Rapid7 Bulk Export MCP — GraphQL Query Injection in Export Status Lookup

    Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component (`get_export_status` in `src/export_manager.py`), whereby the `export_id` value — an unvalidated MCP tool argument reaching the func…

    Rapid7 Platform