{"data":{"id":"5eb7ddef-64f2-4613-8ebb-f2f0ebcd42e8","title":"CVE-2026-97228: Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status…","summary":"Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 contain a GraphQL query injection in `get_export_status` in `src/export_manager.py`. The unvalidated `export_id` argument, passed via the `check_rapid7_export_status` and `download_rapid7_export` tools, is interpolated directly into the query string, so a crafted value can append attacker-chosen root-level selections such as schema introspection. The injected query runs under the operator's own API key and cannot cross a tenant or account boundary, so the realistic exposure is a compromised or careless upstream MCP client or indirect prompt injection.","solution":"Fixed in version 0.6.2, which passes `export_id` as a parameterized GraphQL variable (`$exportId: ID!`).","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-97228","publishedAt":"2026-09-25T11:17:02.163Z","cveId":"CVE-2026-97228","cweIds":["CWE-943"],"cvssScore":"2.7","cvssSeverity":"low","severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Rapid7 Bulk Export MCP"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Rapid7 Bulk Export MCP GraphQL query injection in export-status component","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"high","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00248,"epssCheckedAt":"2026-11-09T12:10:46.464Z","kevDateAdded":null,"advisoryAliases":["GHSA-pwmm-7g3w-8pvp"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-08T06:09:35.792Z","patchAvailable":null,"disclosureDate":"2026-09-25T11:17:02.163Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[]}}