Alibaba Alibaba Cloud RDS OpenAPI MCP Server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Alibaba Alibaba Cloud RDS OpenAPI MCP Server: 1 record(s), with affected versions and fixes.

CVE-2026-9680 Medium · 5.8 CWE-1188 Jul 28, 2026

MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.