CVE-2026-61462High· 8.6▾ MidnightPoC availablemcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to e…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 47.3 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 24.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.5%
Last analysed / modified upstream
mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to escape the intended path prefix and access arbitrary GitLab API resources using the operator's personal access token.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-61560Critical· 9.8`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab
CVE-2026-61559Critical· 9.6`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab
CVE-2026-26157High· 7.0A flaw was found in BusyBox
CVE-2026-114253Medium· 6.3oretnom23 file-management-system-php index.php include file inclusion
CVE-2026-111234Medium· 5.9SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:// URLs in redirects or autodiscovery links
CVE-2026-57155Critical· 9.9OPNsense is a FreeBSD based firewall and routing platform