{"data":{"id":"2d8d0290-efe8-43b3-ab6d-58f14c086601","title":"CVE-2026-44895: GitLab MCP Server lets an AI agent talk directly to GitLab. Prior to 0.6.0, the HTTP transport in src/transport.ts…","summary":"CVE-2026-44895 affects the GitLab MCP Server before 0.6.0. Its HTTP transport in src/transport.ts has no authentication and sends a wildcard Access-Control-Allow-Origin: * header, while exposing a mutation-capable RPC endpoint backed by GITLAB_PERSONAL_ACCESS_TOKEN. Because httpServer.listen(port) at line 97 passes no host, the server binds to 0.0.0.0 and exposes this surface on every interface.","solution":"Fixed in 0.6.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-44895","publishedAt":"2026-05-26T22:16:42.730Z","cveId":"CVE-2026-44895","cweIds":["CWE-306","CWE-942"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@yoda.digital/gitlab-mcp-server@< 0.6.0 (fixed: 0.6.0)"],"affectedPackageNames":["@yoda.digital/gitlab-mcp-server"],"affectedPackageRefs":["npm:@yoda.digital/gitlab-mcp-server"],"affectedVendors":[],"affectedVendorsRaw":["GitLab MCP Server","GitLab"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"GitLab MCP Server HTTP transport accepts unauthenticated requests","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0062,"epssCheckedAt":"2026-10-14T06:09:05.631Z","kevDateAdded":null,"advisoryAliases":["GHSA-8jr5-6gvj-rfpf"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:06.707Z","patchAvailable":true,"disclosureDate":"2026-05-26T22:16:42.730Z","capecIds":["CAPEC-115"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}