Vulnerability-Lookup

RHSA-2026:62537

Vulnerability from csaf_redhat - Published: 2026-09-02 08:21 - Updated: 2026-09-21 11:45

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Severity

Moderate

Notes

Topic: An update for Red Hat Hardened Images RPMs is now available.

Details: This update includes the following RPMs: tempo3.0: * tempo3.0-3.0.3-0.2.hum1 (aarch64, x86_64) * tempo3.0-3.0.3-0.2.hum1.src (src) Security Fix(es): tempo3.0: * CVE-2026-81092

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-10601

A flaw was found in the Tempo and Loki datasource plugins. A remote attacker with a Viewer role could exploit a path traversal vulnerability by manipulating user-supplied input in URL paths. This could allow the attacker to capture sensitive administrator-configured datasource credentials, invoke state-changing administrative functions on Tempo, or exfiltrate internal service data from Loki.

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@aarch64	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@src	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-81092

A flaw was found in mcp-go. This component failed to validate the Host header in HTTP requests, specifically within its StreamableHTTPServer and SSEServer transports. A remote attacker could exploit this by using a crafted web page to perform a DNS rebinding attack. This allows the attacker to direct a controlled domain name to the loopback address, bypassing local network restrictions. Consequently, the attacker could access and interact with local services and resources, potentially leading to information disclosure or unauthorized actions.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 3 products, the same list as for CVE-2026-10601

Threats

Impact Moderate

References

19 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:62537	self
https://access.redhat.com/security/cve/CVE-2026-81092	external
https://access.redhat.com/security/updates/classi…	external
https://images.redhat.com/	external
https://access.redhat.com/security/cve/CVE-2026-10601	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-10601	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491359	external
https://www.cve.org/CVERecord?id=CVE-2026-10601	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10601	external
https://grafana.com/security/security-advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-81092	self
https://bugzilla.redhat.com/show_bug.cgi?id=2525106	external
https://www.cve.org/CVERecord?id=CVE-2026-81092	external
https://nvd.nist.gov/vuln/detail/CVE-2026-81092	external
https://github.com/mark3labs/mcp-go	external
https://github.com/mark3labs/mcp-go/pull/921	external
https://github.com/mark3labs/mcp-go/releases/tag/…	external
https://www.vulncheck.com/advisories/mcp-go-befor…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\ntempo3.0:\n  * tempo3.0-3.0.3-0.2.hum1 (aarch64, x86_64)\n  * tempo3.0-3.0.3-0.2.hum1.src (src)\n\nSecurity Fix(es):\n\ntempo3.0:\n  * CVE-2026-81092",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:62537",
        "url": "https://access.redhat.com/errata/RHSA-2026:62537"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-81092",
        "url": "https://access.redhat.com/security/cve/CVE-2026-81092"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-10601",
        "url": "https://access.redhat.com/security/cve/CVE-2026-10601"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62537.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
    "tracking": {
      "current_release_date": "2026-09-21T11:45:02+00:00",
      "generator": {
        "date": "2026-09-21T11:45:02+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:62537",
      "initial_release_date": "2026-09-02T08:21:17+00:00",
      "revision_history": [
        {
          "date": "2026-09-02T08:21:17+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-16T20:05:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-21T11:45:02+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tempo3.0-0:3.0.3-0.2.hum1@aarch64",
                "product": {
                  "name": "tempo3.0-0:3.0.3-0.2.hum1@aarch64",
                  "product_id": "tempo3.0-0:3.0.3-0.2.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tempo3.0@3.0.3-0.2.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tempo3.0-0:3.0.3-0.2.hum1@src",
                "product": {
                  "name": "tempo3.0-0:3.0.3-0.2.hum1@src",
                  "product_id": "tempo3.0-0:3.0.3-0.2.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tempo3.0@3.0.3-0.2.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tempo3.0-0:3.0.3-0.2.hum1@x86_64",
                "product": {
                  "name": "tempo3.0-0:3.0.3-0.2.hum1@x86_64",
                  "product_id": "tempo3.0-0:3.0.3-0.2.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tempo3.0@3.0.3-0.2.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tempo3.0-0:3.0.3-0.2.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@aarch64"
        },
        "product_reference": "tempo3.0-0:3.0.3-0.2.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tempo3.0-0:3.0.3-0.2.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@src"
        },
        "product_reference": "tempo3.0-0:3.0.3-0.2.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tempo3.0-0:3.0.3-0.2.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@x86_64"
        },
        "product_reference": "tempo3.0-0:3.0.3-0.2.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-10601",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-06-22T14:02:01.118693+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491359"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Tempo and Loki datasource plugins. A remote attacker with a Viewer role could exploit a path traversal vulnerability by manipulating user-supplied input in URL paths. This could allow the attacker to capture sensitive administrator-configured datasource credentials, invoke state-changing administrative functions on Tempo, or exfiltrate internal service data from Loki.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana: tempo: loki: Tempo and Loki Datasource Plugins: Information disclosure and unauthorized actions via path traversal",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@aarch64",
          "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@src",
          "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-10601"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491359",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491359"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-10601",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-10601"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10601",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10601"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-10601",
          "url": "https://grafana.com/security/security-advisories/cve-2026-10601"
        }
      ],
      "release_date": "2026-06-22T13:18:31.531000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-02T08:21:17+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@aarch64",
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@src",
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62537"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@aarch64",
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@src",
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "grafana: tempo: loki: Tempo and Loki Datasource Plugins: Information disclosure and unauthorized actions via path traversal"
    },
    {
      "cve": "CVE-2026-81092",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-08-27T17:00:21.259921+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2525106"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in mcp-go. This component failed to validate the Host header in HTTP requests, specifically within its StreamableHTTPServer and SSEServer transports. A remote attacker could exploit this by using a crafted web page to perform a DNS rebinding attack. This allows the attacker to direct a controlled domain name to the loopback address, bypassing local network restrictions. Consequently, the attacker could access and interact with local services and resources, potentially leading to information disclosure or unauthorized actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/mark3labs/mcp-go: mcp-go: DNS Rebinding vulnerability due to missing Host header validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "DNS rebinding requires a web browser executing JavaScript to run on the same host as the mcp-go HTTP server, with the user visiting a malicious page during that window. Red Hat products carrying this dependency are containerized server-side services (tempo, mcp-gateway) and CLI tools (rhai-cli) deployed in Kubernetes/OpenShift environments. In those deployments no browser shares the loopback interface with the affected service, so the preconditions for exploitation are not met. The high confidentiality and integrity scores in the CVSS vector reflect what a running mcp-go server can expose if the attack succeeds; in Red Hat deployments the co-located browser condition does not arise in normal operations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@aarch64",
          "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@src",
          "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-81092"
        },
        {
          "category": "external",
          "summary": "RHBZ#2525106",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525106"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-81092",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-81092"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-81092",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81092"
        },
        {
          "category": "external",
          "summary": "https://github.com/mark3labs/mcp-go",
          "url": "https://github.com/mark3labs/mcp-go"
        },
        {
          "category": "external",
          "summary": "https://github.com/mark3labs/mcp-go/pull/921",
          "url": "https://github.com/mark3labs/mcp-go/pull/921"
        },
        {
          "category": "external",
          "summary": "https://github.com/mark3labs/mcp-go/releases/tag/v0.56.0",
          "url": "https://github.com/mark3labs/mcp-go/releases/tag/v0.56.0"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/mcp-go-before-0.56.0-missing-host-header-validation-enables-dns-rebinding",
          "url": "https://www.vulncheck.com/advisories/mcp-go-before-0.56.0-missing-host-header-validation-enables-dns-rebinding"
        }
      ],
      "release_date": "2026-08-27T14:50:33.286000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-02T08:21:17+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@aarch64",
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@src",
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62537"
        },
        {
          "category": "workaround",
          "details": "Where an immediate update to mcp-go v0.56.0 is not possible: restrict inbound connections to known trusted clients via network policy or firewall rules, and place a reverse proxy in front of the MCP endpoint that enforces strict Host header validation.",
          "product_ids": [
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@aarch64",
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@src",
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@aarch64",
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@src",
            "Red Hat Hardened Images:tempo3.0-0:3.0.3-0.2.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/mark3labs/mcp-go: mcp-go: DNS Rebinding vulnerability due to missing Host header validation"
    }
  ]
}

CVE-2026-10601 (GCVE-0-2026-10601)

Vulnerability from cvelistv5 – Published: 2026-06-22 13:18 – Updated: 2026-08-27 17:22

Title

Path traversal in the Tempo and Loki data source plugins

Summary

A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endpoints. Depending on the backend configuration this can expose data source credentials, leak internal responses, or trigger administrative actions on the configured backend.

Severity

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-22 15:44 UTC

CWE

CWE-22
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GRAFANA mitre root Scorecard

References

1 reference

URL	Tags
https://grafana.com/security/security-advisories/…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Grafana	Grafana OSS	Affected: 11.6.0 , ≤ 11.6.14 (semver) Affected: 12.2.0 , ≤ 12.2.8 (semver) Affected: 12.3.0 , ≤ 12.3.6 (semver) Affected: 12.4.0 , ≤ 12.4.3 (semver) Affected: 13.0.0 , ≤ 13.0.1 (semver)

Date Public

2026-06-09 00:00

Credits

homb (Researcher)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-10601",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-22T15:44:03.006985Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-24T15:54:19.712Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Grafana OSS",
          "vendor": "Grafana",
          "versions": [
            {
              "lessThanOrEqual": "11.6.14",
              "status": "affected",
              "version": "11.6.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "12.2.8",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "12.3.6",
              "status": "affected",
              "version": "12.3.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "12.4.3",
              "status": "affected",
              "version": "12.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "13.0.1",
              "status": "affected",
              "version": "13.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "homb (Researcher)"
        }
      ],
      "datePublic": "2026-06-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endpoints. Depending on the backend configuration this can expose data source credentials, leak internal responses, or trigger administrative actions on the configured backend."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T17:22:42.795Z",
        "orgId": "57da9224-a3e2-4646-9d0e-c4dc2e05e7da",
        "shortName": "GRAFANA"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://grafana.com/security/security-advisories/cve-2026-10601"
        }
      ],
      "source": {
        "discovery": "BUG_BOUNTY"
      },
      "title": "Path traversal in the Tempo and Loki data source plugins",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "57da9224-a3e2-4646-9d0e-c4dc2e05e7da",
    "assignerShortName": "GRAFANA",
    "cveId": "CVE-2026-10601",
    "datePublished": "2026-06-22T13:18:31.531Z",
    "dateReserved": "2026-06-02T09:57:26.570Z",
    "dateUpdated": "2026-08-27T17:22:42.795Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-81092 (GCVE-0-2026-81092)

Vulnerability from cvelistv5 – Published: 2026-08-27 14:50 – Updated: 2026-08-29 11:48

Title

mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding

Summary

mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/streamable_http.go and SSEServer.ServeHTTP in server/sse.go served any request arriving over a loopback connection regardless of the host it named, and the SSE transport's cross-origin default allowed any origin. A page in a browser could therefore point a name it controlled at the loopback address and reach a server listening there, invoking tools and reading resources that the server exposed on the assumption that only local software could connect. No release before 0.56.0 validated the header on either transport; 0.56.0 adds server/http_localhost.go, which rejects a loopback-bound request carrying a host that is not a loopback name, and wires it into both transports.

Severity

7.6 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-27 18:24 UTC

CWE

CWE-346 - Origin Validation Error

Assigner

VulnCheck mitre root Scorecard

References

4 references

URL	Tags
https://github.com/mark3labs/mcp-go	product
https://github.com/mark3labs/mcp-go/pull/921	issue-trackingpatch
https://github.com/mark3labs/mcp-go/releases/tag/…	release-notes
https://www.vulncheck.com/advisories/mcp-go-befor…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
mark3labs	mcp-go	Affected: 0 , < 0.56.0 (semver)

Date Public

2026-08-26 00:00

Credits

Avishai Gonen (Pluto Security)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-81092",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-27T18:24:13.452450Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-28T16:00:07.892Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/mark3labs/mcp-go",
          "defaultStatus": "unaffected",
          "packageURL": "pkg:golang/github.com/mark3labs/mcp-go",
          "product": "mcp-go",
          "repo": "https://github.com/mark3labs/mcp-go",
          "vendor": "mark3labs",
          "versions": [
            {
              "lessThan": "0.56.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Avishai Gonen (Pluto Security)"
        }
      ],
      "datePublic": "2026-08-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/streamable_http.go and SSEServer.ServeHTTP in server/sse.go served any request arriving over a loopback connection regardless of the host it named, and the SSE transport\u0027s cross-origin default allowed any origin. A page in a browser could therefore point a name it controlled at the loopback address and reach a server listening there, invoking tools and reading resources that the server exposed on the assumption that only local software could connect. No release before 0.56.0 validated the header on either transport; 0.56.0 adds server/http_localhost.go, which rejects a loopback-bound request carrying a host that is not a loopback name, and wires it into both transports."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-346",
              "description": "Origin Validation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-29T11:48:08.125Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/mark3labs/mcp-go"
        },
        {
          "tags": [
            "issue-tracking",
            "patch"
          ],
          "url": "https://github.com/mark3labs/mcp-go/pull/921"
        },
        {
          "name": "mcp-go v0.56.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/mark3labs/mcp-go/releases/tag/v0.56.0"
        },
        {
          "name": "VulnCheck Advisory: mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/mcp-go-before-0.56.0-missing-host-header-validation-enables-dns-rebinding"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-81092",
    "datePublished": "2026-08-27T14:50:33.286Z",
    "dateReserved": "2026-08-26T16:00:30.950Z",
    "dateUpdated": "2026-08-29T11:48:08.125Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:62537

CVE-2026-10601 (GCVE-0-2026-10601)

CVE-2026-81092 (GCVE-0-2026-81092)

Tags

Sightings

Nomenclature

Related by attack behaviour