CVE-2026-61560Proof of concept (PoC) published · CISASuited to automated attack · CISA
@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover
CVSS score
9.8
EPSS probability
%2.9
Risk score
0.3
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access
Makefile Go / Python
Similar Vulnerabilities
9.1
CVE-2025-61686
Path traversal in Shopify React Router/node
S
Patch status unknown Public Exploits:3EPSS %17
8.3
CVE-2026-59179
@openhop/server: Path Traversal in Flow ID File Operations
N
Patch verified
7.8
CVE-2026-59176
functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import
N
Patch verified
7.5
CVE-2026-59158
Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients
N
Patch verified
9.8
CVE-2020-7624
Withdrawn Advisory: OS Command Injection in effect
N
Patch status unknownEPSS %4
9.0
CVE-2026-69251
Flowise RCE via TypeORM DataSource
F
Patch verified Public Exploits:1EPSS %3
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-61560"