CVE-2026-44895

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-44895
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44895.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-44895
Aliases
Published
2026-05-26T21:08:13Z
Modified
2026-08-12T03:51:37Z
Severity
  • 9.2 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
GitLab MCP Server: SSE transport has no authentication and wildcard CORS, exposing all GitLab tools
Details

GitLab MCP Server lets an AI agent talk directly to GitLab. Prior to 0.6.0, the HTTP transport in src/transport.ts ships with no authentication layer at all and a wildcard Access-Control-Allow-Origin: * on every response. The structural defect is that the SSE server stands up a stateful, mutation-capable RPC endpoint that is backed by the operator's GITLAB_PERSONAL_ACCESS_TOKEN without any inbound credential check, then advertises itself to every cross-origin browser context via the wildcard CORS header. The httpServer.listen(port) call at line 97 also passes no host argument, so the bind defaults to 0.0.0.0 and exposes the auth-less surface on every interface. This vulnerability is fixed in 0.6.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-306",
        "CWE-942"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44895.json"
}
References

Affected packages

Git / github.com/yoda-digital/mcp-gitlab-server

Affected ranges

Type
GIT
Repo
https://github.com/yoda-digital/mcp-gitlab-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
9f6a41919a12725cd5d49bafe80c8bbd7ad2fe91
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.6.0"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

v0.*
v0.3.1
v0.3.2
v0.4.0
v0.5.0
v0.5.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44895.json"