CVE-2026-61559

`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYNAMIC_API_URL=true` is set, the server reads the `X-GitLab-API-URL` HTTP request header and uses it as the base URL for all outbound GitLab API calls made within that request. The server validates that the value is a well-formed URL (`new URL(dynamicApiUrl)`) but applies no allowlist or hostname restriction. The server then attaches the victim's `Private-Token` to every outbound fetch that uses the redirected URL. Any caller who can reach the HTTP transport can set `X-GitLab-API-URL` to an attacker-controlled host. The next GitLab API call the server makes delivers the victim's token to that host. Version 2.1.27 contains a patch.

Scoring

Severity

CRITICAL

CVSS base score

9.6

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

EPSS probability

0.27%

CWE

CWE-918

Published

2026-09-15

Last modified

2026-09-17

Affected products

• zereight gitlab-mcp

Weakness type

• CWE-918

Related vulnerabilities

• CVE-2026-83548 — A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
• CVE-2026-87595 — Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging socia
• CVE-2026-66842 — BIG-IP and BIG-IQ Configuration utility vulnerability
• CVE-2026-92808 — Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise
• CVE-2026-75754 — Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in A
• CVE-2026-54734 — Prebid Server Java: Vulnerability to request forgery allows for possible host environment data extraction
• CVE-2026-68536 — Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability
• CVE-2026-12944 — Incomplete Security Scanner Blocklist Enables Network-Based Code Execution

Markdown version · Browse all CVEs