Description
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Alibaba | Alibaba Cloud RDS OpenAPI MCP Server | 1.8.0 – ≤ 3.1.2 | — |