AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

CVE-2026-97228: Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status com

lowvulnerability

security

Source: NVD/CVE DatabaseSeptember 25, 2026CVE-2026-97228

Summary

Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 have a GraphQL query injection vulnerability (a type of attack where an attacker manipulates database queries by inserting malicious code) in the export-status component. An attacker can craft a malicious `export_id` value that breaks out of the intended query and adds their own commands, but the attack is limited because it only runs with the operator's own API permissions and cannot access other accounts or organizations.

Solution / Mitigation

This is fixed in version 0.6.2, which passes `export_id` as a parameterized GraphQL variable (`$exportId: ID!`), meaning the value is treated as data rather than part of the query structure itself.