Skip to content
OpenAdvisories

Product · zereight

mcp-gitlab

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-61462

    mcp-gitlab Path Traversal via job_id Parameter

    mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to escape the intended pat…

    zereight mcp-gitlab Web / CMS