gitlab-mcp vulnerabilities

3 known vulnerabilities in gitlab-mcp from Zereight. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  gitlab-mcp: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-61560Sep 15, 2026ZereightEPSS 2.9%

  `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes all MCP tools without any authentication. The `upload_markdown` tool reads arbitrary files from the server's local filesy

• 9.6 Critical severity

  gitlab-mcp: Reliance on Reverse DNS Resolution for a Security-Critical Action

  CVE-2026-61568Sep 15, 2026Zereight

  `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a vict

• 9.6 Critical severity

  gitlab-mcp: Server-Side Request Forgery

  CVE-2026-61559Sep 15, 2026Zereight

  `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYNAMIC_API_URL=true` is set, the server reads the `X-GitLab-API-URL` HTTP request header and use