nmap-mcp vulnerabilities

CVEs whose affected-version data names the nmap-mcp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-117570Medium· 5.2

1w ago

nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities

Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass catego…

▾ SunlitVorota-ai · nmap-mcpvia CVEORG