{"id":"CVE-2026-57496","title":"NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing","summary":"NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.8, netlicensing_get_product passes the caller-controlled product_nu…","severity":"critical","cvss":9.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cwe":["CWE-22"],"vendor":"netlicensing-mcp","product":"netlicensing-mcp","affected":["netlicensing-mcp < 0.1.8"],"patched":["netlicensing-mcp 0.1.8"],"published":"2026-10-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T19:17:41.733","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-57496","references":[{"url":"https://github.com/Labs64/NetLicensing-MCP/commit/b8fd0ea76d533202573eb24add9fb2fbd9331496","label":"security-advisories@github.com"},{"url":"https://github.com/Labs64/NetLicensing-MCP/pull/6","label":"security-advisories@github.com"},{"url":"https://github.com/Labs64/NetLicensing-MCP/releases/tag/0.1.8","label":"security-advisories@github.com"},{"url":"https://github.com/Labs64/NetLicensing-MCP/security/advisories/GHSA-hxpf-9xvq-wph8","label":"security-advisories@github.com"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57496"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/netlicensing-mcp/PYSEC-2026-3489.yaml"},{"url":"https://github.com/advisories/GHSA-hxpf-9xvq-wph8"},{"url":"https://github.com/Labs64/NetLicensing-MCP"}],"tags":["nvd","ghsa","pip","cve.org","osv","exploit-available"],"aliases":["GHSA-hxpf-9xvq-wph8","PYSEC-2026-3489"],"ecosystem":"pip","ingestedAt":"2026-07-21T19:04:57.195Z","epss":0.00435,"epssPercentile":0.3763,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-10-21T01:05:25.602524Z"},"slug":"CVE-2026-57496","body":"## Overview\n\nNetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.8, netlicensing_get_product passes the caller-controlled product_number to src/netlicensing_mcp/tools/products.py, which interpolates it into a REST path consumed by nl_get() in src/netlicensing_mcp/client.py without path-segment validation. A traversal segment can be normalized from the intended product path to the /token endpoint, after which the response is serialized through _wrap_json instead of _wrap_json_token_read, bypassing redact_token_read() protections for APIKEY number and SHOP shopURL fields. An authenticated MCP client with a non-administrative API key can retrieve plaintext token values, and a recovered administrative token can provide broad read, write, and delete access to the NetLicensing account. This issue is fixed in version 0.1.8.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-57496)\n\nAffected packages:\n\n- `netlicensing-mcp < 0.1.8`\n\nPatched in:\n\n- `netlicensing-mcp 0.1.8`\n\nSource: https://github.com/advisories/GHSA-hxpf-9xvq-wph8","depth":"abyssal","depthScore":65,"depthScoreParts":{"impact":52.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":226722,"id":"CVE-2026-57496","ts":1792546642598,"field":"exploit_available","old":"false","new":"true"}]}