Skip to content
OpenAdvisories

Vendor

Vorota-ai

1 known vulnerabilities.

Products

nmap-mcp 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.2
    CVE-2026-117570

    nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities

    Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos…

    Vorota-ai nmap-mcp