Process Compose
Monthly
Process Compose before 1.120.0 exposes its MCP SSE listener on loopback without validating the Host or Origin header or authenticating the caller, allowing a malicious website to reach that listener through DNS rebinding and issue MCP requests. Unauthenticated remote attackers (CVSS 4.0 PR:N, UI:P) can, when expose_control_tools is enabled, enumerate process state, read, search or truncate logs, and start, stop, restart or scale local processes; user-defined tools may expose further commands and output. Publicly available exploit code exists (SSVC Exploitation: poc), no active exploitation is confirmed (no CISA KEV listing), and the issue is fixed in 1.120.0.
Process Compose before 1.120.0 exposes its MCP SSE listener on loopback without validating the Host or Origin header or authenticating the caller, allowing a malicious website to reach that listener through DNS rebinding and issue MCP requests. Unauthenticated remote attackers (CVSS 4.0 PR:N, UI:P) can, when expose_control_tools is enabled, enumerate process state, read, search or truncate logs, and start, stop, restart or scale local processes; user-defined tools may expose further commands and output. Publicly available exploit code exists (SSVC Exploitation: poc), no active exploitation is confirmed (no CISA KEV listing), and the issue is fixed in 1.120.0.