Labs64 vulnerabilities
We track 4 vulnerabilities in Labs64 products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
Latest Labs64 vulnerabilities
- 9.6 Critical severity
NetLicensing-MCP: Improper Limitation of a Pathname to a Restricted Directory
NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.8, netlicensing_get_product passes the caller-controlled product_number to src/netlicensin
- 8.1 High severity
NetLicensing-MCP: Missing Authentication for Critical Functionality
NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Aut
- 8.6 High severity
PluginPass: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 PluginPass pluginpass-pro-plugintheme-licensing allows Manipulating Web Input to File System Calls.This issue affects PluginPass: from n/a through <= 0.9.10.
- 7.5 High severity
DigiPass: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 DigiPass digipass allows Absolute Path Traversal.This issue affects DigiPass: from n/a through <= 0.3.0.