CVE-2026-79538

CriticalCVSS 9.8

Published: 29/09/2026(UTC)Updated: 29/09/2026(UTC)Translated: 30/09/2026(UTC)NVD NIST

Summary

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (createTransport, STDIO branch, routers/mcp-proxy/server.ts).

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code on the server, potentially leading to full system compromise.

Recommendation

Update MetaMCP to the latest version and restrict access to the proxy endpoint to trusted users only.

Other vulnerabilities in MetaMCP

CVE-2026-79537Critical
IDOR vulnerability in MetaMCP up to 2.4.22 in MCP transport. Sessions are keyed only by client-supplied mcp-session-id header without owner binding, and /metamcp/health/sessions discloses active session IDs. An attacker can use another tenant's session to execute private MCP tools and exfiltrate data.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS