mcp-gitlab-server vulnerabilities

1 known vulnerability in mcp-gitlab-server from Yoda-digital. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.2 Critical severity

  mcp-gitlab-server: Missing Authentication for Critical Functionality

  CVE-2026-44895May 26, 2026Yoda-digital

  GitLab MCP Server lets an AI agent talk directly to GitLab. Prior to 0.6.0, the HTTP transport in src/transport.ts ships with no authentication layer at all and a wildcard Access-Control-Allow-Origin: * on every response. The structural defect is that the SSE