EUVD-2026-49727
GHSA-fw7c-j2q8-f24m
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Network accessible without authentication, low impact, scope change
Primary rating from Vendor (list).
CVSS VectorVendor: list
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Lifecycle Timeline
1DescriptionCVE.org
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.
AnalysisAI
Information disclosure in alibabacloud-rds-openapi-mcp-server due to default exposure of MCP tools allows remote unauthenticated attackers to invoke tools via network access to a listener on all interfaces. No public exploit or active exploitation has been identified at the time of analysis, but the default configuration makes exploitation trivial for network-accessible instances.
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The server must be running with its default configuration where the MCP endpoint listens on all network interfaces (0.0.0.0). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 5.8 (medium) with AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N indicates easy exploitation with low impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker on the same network or the internet sends a crafted request to the MCP endpoint (default port) and invokes exposed tools, retrieving sensitive configuration data such as database connection strings or metadata. No public exploit code is known to exist at this time. |
| Remediation | No vendor-released patch has been identified at the time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today