Zereight Mcp-Gitlab vulnerabilities

CVE-2026-61560 [CRITICAL] CWE-22 @zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover @zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover ### Summary The SSE transport mode (`SSE=true`) exposes all MCP tools without any authentication. The `upload_markdown` tool reads arbitrary files from the server's local filesystem via an unsanitized `f

CVE-2026-61462 [HIGH] CWE-73 CVE-2026-61462: mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that al mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to escape the intended path prefix and access arbitrary GitLab API resources using the operator's personal access token.

CVE-2026-61559 [CRITICAL] CWE-918 @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery # Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft ## Affected - **Repository:** `zereight/gitlab-mcp` - **Affected versions:** All versions through commit `74a8c83` - **Patched versions:** None at time of report ## Severity High. CVSS v3.1 8.5 (`AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N`) ## Description Wh

CVE-2026-61568 [CRITICAL] CWE-350 @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport `@zereight/mcp-gitlab` exposes its Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a victim's local MCP listener while preserving an attacker-controlled `Host` and `Origin`. The server accepts those header