CRITICAL 10.0 GitHub
CVE-2026-59971
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
## Summary
In SSE/HTTP transport mode, `mysql_mcp_server` constructs `SseServerTransport` without passing `security_settings`. As a result, the MCP Python SDK's DNS-rebinding protection (Origin/Host header validation) is disabled; the Starlette application has no CORS or TrustedHost middleware; and the service binds to `0.0.0.0` by default with no authentication on any route.
**Trigger condition:** `MCP_TRANSPORT=sse`. The default stdio mode is not affected.
## Attack Scenarios
**Scenario A
Affected Products
- pip/mysql-mcp-server < 0.4.2
References
- https://github.com/advisories/GHSA-rqfv-2mw9-78g2
- https://github.com/designcomputer/mysql_mcp_server/security/advisories/GHSA-rqfv-2mw9-78g2
- https://github.com/designcomputer/mysql_mcp_server/issues/92
- https://github.com/designcomputer/mysql_mcp_server/releases/tag/v0.4.2
This critical severity vulnerability with a CVSS score of 10.0 was published on 2026-09-11 via GitHub. Affected: pip/mysql-mcp-server < 0.4.2.
Risk Timeline
CVE Disclosed2026-09-11 · -1 days ago
Remediation Resources
Related Vulnerabilities
| CVE | Title | Severity | CVSS |
|---|---|---|---|
| CVE-2026-78676 | GitPython: Dormant multi-line git-config values are corrupted into live injected | CRITICAL | 9.8 |
| CVE-2026-59151 | Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover | CRITICAL | 9.6 |
| CVE-2026-79657 | NLTK: Allowlisted pickle loaders still permit code execution in current source | CRITICAL | — |
| CVE-2026-78683 | NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execu | CRITICAL | — |
| CVE-2026-59177 | ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA ad | HIGH | 8.8 |
| CVE-2026-78675 | GitPython: Arbitrary local file content disclosure via [include] directive in un | HIGH | 8.4 |
vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.