◆ CVE Hub

CVE-2026-57207

NetBox MCP Server: HTTP transport exposes all NetBox data without authentication

Published
2026-10-23
Last modified
2026-10-23
CNA
GitHub_M
NVD status
Deferred
CWE
CWE-306 CWE-1059

Fetching some sources has been requested. Reload in about a minute to see them.

CVSS v3.1 (listed by NVD)
5.9
MEDIUM
Scored by github.com (not yet scored by NVD)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
5.9
MEDIUM
Scored by CNA (GitHub_M) · v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS exploit probability
0.4%
Percentile 34.8%
as of 2026-10-24
CISA KEV
—
Not listed

Attack conditions and impact

Derived from the CNA (via NVD) CVSS 3.1 vector
NetworkNo authNo interactionConditions Confidentiality HIntegrity NAvailability N

This vulnerability may be exploitable over the internet without authentication or user interaction.

MetricValueMeaning
Attack vector AVNNetwork
Attack complexity ACHHigh (conditions required)
Privileges required PRNNone
User interaction UINNone
Scope SUUnchanged
Confidentiality CHHigh
Integrity INNone
Availability ANNone
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

NVD

NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session and full access to all four NetBox tools - no token or credential needed. This issue has been patched in version 1.2.1.

CVSS assessments

ProviderVersionScoreVector
NVD / [email protected] (Secondary)3.15.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CNA / GitHub_M3.15.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products and packages

CNA (CVE.org)

VendorProductVersions
netboxlabsnetbox-mcp-server
affected: < 1.2.1

Linux distribution status

Red Hat ↗ Fetching

Debian ↗

No record

Ubuntu ↗ Fetching

References (2)