CVE-2026-61559General

LOWCVSS 9.6 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYNAMIC_API_URL=true` is set, the server reads the `X-GitLab-API-URL` HTTP request header and uses it as the base URL for all outbound GitLab API calls made within that request. The server validates that the value is a well-formed URL (`new URL(dynamicApiUrl)`) but applies no allowlist or hostname restriction. The server then attaches the victim's `Private-Token` to every outbound fetch that uses the redirected URL. Any caller who can reach the HTTP transport can set `X-GitLab-API-URL` to an attacker-controlled host. The next GitLab API call the server makes delivers the victim's token to that host. Version 2.1.27 contains a patch.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
General: 1 classified signal
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

General

150.0%

Patch

150.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-61559

Full discourse2 posts

Upwind Security MDR@UpwindMDR47d
Patch
🚨Critical - @zereight/mcp-gitlab SSRF via X-GitLab-API-URL Token Exfil (CVE-2026-61559) When ENABLE_DYNAMIC_API_URL=true, @zereight/mcp-gitlab trusts the X-GitLab-API-URL request header as the base URL for outbound GitLab API calls with no allowlist/hostname checks. An attacker reaching the HTTP transport can redirect requests to an attacker host and capture the victim GitLab Private-Token. Deployments with ENABLE_DYNAMIC_API_URL=false are not affected. 👉Affected: @zereight/mcp-gitlab >= 0.0.1 and < 2.1.27 | Upgrade to 2.1.27
Post summary
The text discloses a critical SSRF/token-exfiltration vulnerability in @zereight/mcp-gitlab and identifies affected versions. It primarily emphasizes remediation by upgrading to version 2.1.27.
31020214
321 followersView on X
CVE@CVEnew47d
General
CVE-2026-61559 `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYN… https://www.cve.org/CVERecord?id=CVE-2026-61559
Post summary
The text provides a brief description of CVE-2026-61559 affecting the mcp-gitlab server, indicating vulnerable versions but lacking details on exploitation, patches, or technical specifics.
00000883
58.1K followersView on X

Explore more

Back to dashboard