Mcp-use vulnerabilities
We track 1 vulnerability in Mcp-use products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 27, 2026.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Mcp-use vulnerabilities
- 8.6 High severity
mcp-use: Server-Side Request Forgery
The proxy middleware in mcp-use's inspector forwards requests to a destination the caller names. mountMcpProxy in libraries/typescript/packages/inspector/src/server/proxy/mcp-proxy.ts read the target from the X-Target-URL header or the __mcp_target parameter a