Mcp-router vulnerabilities
We track 1 vulnerability in Mcp-router products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 27, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Mcp-router vulnerabilities
- 9.1 Critical severity
mcp-router: Missing Authentication for Critical Functionality
The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required