Skip to content
OpenAdvisories

Product · zereight

gitlab-mcp

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-61560 Scanner template

    @zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

    `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes all MCP tools without any authentication. The `upload_markdown` tool reads arbitrary files from the server's local files…

    zereight gitlab-mcp @zereight/mcp-gitlab Web / CMS npm
  • Critical 9.6
    CVE-2026-61559

    @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

    `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYNAMIC_API_URL=true` is set, the server reads the `X-GitLab-API-URL` HTTP request header and us…

    zereight gitlab-mcp @zereight/mcp-gitlab Web / CMS npm
  • Critical 9.6
    CVE-2026-61568

    @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

    `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a vic…

    zereight gitlab-mcp @zereight/mcp-gitlab Web / CMS npm