AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

GHSA-8jxr-pr72-r468: Java-SDK has a DNS Rebinding Vulnerability

highvulnerabilityLLM-Specific

security

Source: GitHub Advisory DatabaseApril 7, 2026CVE-2026-35568

Summary

The java-sdk has a DNS rebinding vulnerability (an attack where a hacker tricks your browser into accessing a private server by manipulating domain name resolution) that allows attackers to make tool calls to local or private MCP (model context protocol, a system for AI agents to interact with tools) servers if you visit a malicious website. This happens because the java-sdk wasn't validating the Origin header (a security check that confirms requests come from trusted sources) before version 1.0.0, violating the MCP specification.

Solution / Mitigation

Users can mitigate this risk by: 1) Running the MCP server behind a reverse proxy (a security layer like Nginx or HAProxy that forwards requests and can validate headers) configured to strictly validate the Host and Origin headers, or 2) Using a framework that inherently enforces strict CORS (cross-origin resource sharing, a browser security feature that controls which websites can access your data) and Origin validation, such as Spring AI.