NetLicensing-MCP vulnerabilities

2 known vulnerabilities in NetLicensing-MCP from Labs64. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  NetLicensing-MCP: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-57496Oct 15, 2026Labs64

  NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.8, netlicensing_get_product passes the caller-controlled product_number to src/netlicensin

• 8.1 High severity

  NetLicensing-MCP: Missing Authentication for Critical Functionality

  CVE-2026-54446Sep 17, 2026Labs64

  NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Aut