VulnSocial

CVE-2026-11624Disclosure

LOWCVSS 9.4 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25.0 release, users had no way to validate the origin's host. In v0.25.0, a new "--allowed-hosts" flag was introduced alongside the existing "--allowed-origins" flag, enabling users to specify permitted hosts at server startup. Both flags default to "*", allowing users to implement strict access controls as needed without breaking existing setups. If either flag is set to "*", the server will output a startup warning about potential vulnerabilities. Documentation has also been updated to highlight these security considerations.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-346

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 4 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 3 mentions (2026-06-13); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-06-13: 3Mentions · 2026-06-14: 1Patch / Workaround · 2026-06-13: 3Technical Details · 2026-06-13: 3Technical Details · 2026-06-14: 106-1306-14
Signal classification2 categories
Disclosure
250.0%
Patch
250.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-133
Disclosure1Patch2
2026-06-141
Disclosure1
Full discourse4 posts
  • Upwind Security MDR@UpwindMDR
    Patch

    🚨Critical - Google MCP Toolbox for Databases DNS Rebinding via Missing Origin/Host Validation (CVE-2026-11624) MCP Toolbox is Google's open-source server that bridges AI agents to databases, exposing DB access as MCP tools. The Model Context Protocol tells servers to validate the Origin header to stop DNS rebinding — but before v0.25.0, Toolbox gave operators no way to validate the origin's host at all. That left a listening Toolbox server reachable via DNS rebinding: an attacker tricks a victim's browser into hitting the local server and reaching its exposed database tools and data. v0.25.0 adds an --allowed-hosts flag (alongside --allowed-origins) to lock down permitted hosts, and warns at startup if either is left at the default "*". Google rates it CVSS 4.0 9.4. 👉Upgrade to MCP Toolbox v0.25.0 and set --allowed-hosts / --allowed-origins explicitly.

    Post summary

    The post highlights a DNS rebinding vulnerability in older MCP Toolbox versions and urges users to upgrade to v0.25.0 and enable host validation to mitigate the flaw.

    10010119
    216 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-11624 DNS Rebinding Attack Prevention in Model Context Protocol Before v0.25.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11624

    Post summary

    The text announces a DNS rebinding vulnerability in the Model Context Protocol that is fixed in version 0.25.0, providing a simple patch note without detailed exploit or PoC information.

    0001074
    4.0K followersView on X
  • ThreatCluster@threatcluster
    Disclosure

    CVE-2026-11624 in Google MCP Toolbox for Databases up to version 0.24.x allows unauthenticated DNS rebinding attacks via missing Origin header validation, with a CVSS 9.4 score, Tenable reported. https://threatcluster.io/cluster/critical-cve-2026-11624-vulnerability-in-model-context-proto-69e9b971

    Post summary

    CVE‑2026‑11624 allows unauthenticated DNS rebinding in Google MCP Toolbox due to missing Origin header validation, scoring CVSS 9.4, as reported by Tenable.

    0000077
    330 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-11624 The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior… https://www.cve.org/CVERecord?id=CVE-2026-11624

    Post summary

    The advisory highlights a DNS rebinding vulnerability in the Model Context Protocol and recommends validating the Origin header, indicating the primary focus is on mitigation and patching.

    00000167
    57.6K followersView on X

Explore more

Back to dashboard