TagsTags

dns-rebinding

1 entry1 entrada

exploitSep 07, 2026CVE-2026-42559
CVE-2026-42559: DNS rebinding into a local MCP server — rmcp Host header PoC
The Rust MCP SDK's Streamable HTTP transport never looked at the Host header, so any web page could DNS-rebind to a developer's loopback MCP server and call its tools. A two-container lab runs the same server against rmcp 1.3.0 and 1.4.0 to show the fix.
cvercemcpdns-rebindingpoc

exploit07 set 2026CVE-2026-42559
CVE-2026-42559: DNS rebinding até um servidor MCP local — PoC do Host header no rmcp
O transporte Streamable HTTP do SDK Rust de MCP nunca olhava o header Host, então qualquer página web podia fazer DNS rebinding até o servidor MCP em loopback de um desenvolvedor e chamar as ferramentas dele. Um lab de dois contêineres roda o mesmo servidor contra o rmcp 1.3.0 e o 1.4.0 para mostrar a correção.
cvercemcpdns-rebindingpoc

All tags →Todas as tags →