https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 04:16:14 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-55637 <p>genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCP_LISTEN_ADDR value 127.0.0.1:8080 when MCP_AUTH_TOKEN is unset and the httpSrv.Start(addr) branch does not validate the Host or Origin headers. A malicious website can use DNS rebinding to send browser requests with attacker-controlled Host and Origin values to the loopback listener, initialize an MCP session, list tools, and invoke operations against the GenieACS NBI configured by ACS_URL. Successful exploitation can expose or modify CPE management state, including device reboots, firmware tasks, TR-069 parameter changes, presets, provisions, tags, connection requests, and task operations. The npm wrapper is not affected because it forces TRANSPORT=stdio and does not expose an HTTP listener. This issue is fixed in version 0.3.2.</p> <p>genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCP_LISTEN_ADDR value 127.0.0.1:8080 when MCP_AUTH_TOKEN is unset and the httpSrv.Start(addr) branch does not validate the Host or Origin headers. A malicious website can use DNS rebinding to send browser requests with attacker-controlled Host and Origin values to the loopback listener, initialize an MCP session, list tools, and invoke operations against the GenieACS NBI configured by ACS_URL. Successful exploitation can expose or modify CPE management state, including device reboots, firmware tasks, TR-069 parameter changes, presets, provisions, tags, connection requests, and task operations. The npm wrapper is not affected because it forces TRANSPORT=stdio and does not expose an HTTP listener. This issue is fixed in version 0.3.2.</p> https://db.gcve.eu/vuln/fkie_cve-2026-55637 https://db.gcve.eu/vuln/ghsa-cmwv-wf9p-p8wx <p><strong>Affected:</strong> Go: github.com/geiserx/genieacs-mcp</p> <p>`genieacs-mcp` exposes a local Streamable HTTP MCP endpoint that accepts attacker-controlled `Host` and `Origin` headers. A malicious web page can use DNS rebinding to route browser requests to a victim&#39;s loopback MCP listener while preserving the attacker origin. The server accepts the request, initializes an MCP session, lists GenieACS tools, and can invoke tools against the configured GenieACS NBI without a browser-supplied secret.</p> <p>The affected package is `genieacs-mcp` version `0.3.1` at commit `4d7d3c74740efb7f3833aadc8a8e9177650eb462`.</p> <p>The vulnerable transport setup is in `cmd/server/main.go`. When `TRANSPORT` is not `stdio`, the server creates a Streamable HTTP MCP handler:</p> <p>```go // cmd/server/main.go:92 httpSrv := server.NewStreamableHTTPServer(s) addr := os.Getenv(&#34;MCP_LISTEN_ADDR&#34;) if addr == &#34;&#34; { addr = &#34;127.0.0.1:8080&#34; } authToken := os.Getenv(&#34;MCP_AUTH_TOKEN&#34;) if authToken == &#34;&#34; &amp;&amp; !isLoopbackAddr(addr) { log.Fatal(&#34;MCP_AUTH_TOKEN is required when MCP_LISTEN_ADDR is not loopback&#34;) } if authToken != &#34;&#34; { mux := http.NewServeMux() mux.Handle(&#34;/mcp&#34;, bearerAuth(httpSrv, authToken)) log.Printf(&#34;GenieACS MCP bridge listening on %s (auth enabled)&#34;, addr) if err := http.ListenAndServe(addr, mux); err != nil { log.Fatalf(&#34;server error: %v&#34;, err) } } else { log.Printf(&#34;GenieACS MCP bridge listening on %s&#34;, addr) if err := httpSrv.Start(addr); err != nil { log.Fatalf(&#34;server error: %v&#34;, err) } } ```</p> <p>For the defau…</p> <p><strong>Affected:</strong> Go: github.com/geiserx/genieacs-mcp</p> <p>`genieacs-mcp` exposes a local Streamable HTTP MCP endpoint that accepts attacker-controlled `Host` and `Origin` headers. A malicious web page can use DNS rebinding to route browser requests to a victim&#39;s loopback MCP listener while preserving the attacker origin. The server accepts the request, initializes an MCP session, lists GenieACS tools, and can invoke tools against the configured GenieACS NBI without a browser-supplied secret.</p> <p>The affected package is `genieacs-mcp` version `0.3.1` at commit `4d7d3c74740efb7f3833aadc8a8e9177650eb462`.</p> <p>The vulnerable transport setup is in `cmd/server/main.go`. When `TRANSPORT` is not `stdio`, the server creates a Streamable HTTP MCP handler:</p> <p>```go // cmd/server/main.go:92 httpSrv := server.NewStreamableHTTPServer(s) addr := os.Getenv(&#34;MCP_LISTEN_ADDR&#34;) if addr == &#34;&#34; { addr = &#34;127.0.0.1:8080&#34; } authToken := os.Getenv(&#34;MCP_AUTH_TOKEN&#34;) if authToken == &#34;&#34; &amp;&amp; !isLoopbackAddr(addr) { log.Fatal(&#34;MCP_AUTH_TOKEN is required when MCP_LISTEN_ADDR is not loopback&#34;) } if authToken != &#34;&#34; { mux := http.NewServeMux() mux.Handle(&#34;/mcp&#34;, bearerAuth(httpSrv, authToken)) log.Printf(&#34;GenieACS MCP bridge listening on %s (auth enabled)&#34;, addr) if err := http.ListenAndServe(addr, mux); err != nil { log.Fatalf(&#34;server error: %v&#34;, err) } } else { log.Printf(&#34;GenieACS MCP bridge listening on %s&#34;, addr) if err := httpSrv.Start(addr); err != nil { log.Fatalf(&#34;server error: %v&#34;, err) } } ```</p> <p>For the defau…</p> https://db.gcve.eu/vuln/ghsa-cmwv-wf9p-p8wx