5.8
Medium
CVE-2026-9680 Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP…
Description
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Alibaba Cloud RDS OpenAPI MCP Server 1.8 | 1.8.0 → 3.1.2 | No fix stated |
References
- github.com github.com
Timeline
- Published
- Last modified