id: CVE-2026-59971

info:
  name: "MySQL MCP Server - Unauthenticated SSE Transport Exposure"
  author: vedas-arpsyndicate
  severity: critical
  description: |
    MySQL MCP Server before 0.4.2 run with MCP_TRANSPORT=sse builds the SSE transport
    without security_settings or DNS-rebinding protection and exposes the Starlette
    routes /, /sse and /messages/ with no authentication, binding to 0.0.0.0 by default.
    Any network-reachable attacker can list and call tools including execute_sql. The
    root health route only exists in the unauthenticated SSE deployment and returns the
    fixed banner "MySQL MCP Server is running", which the template uses to confirm the
    exposed, unauthenticated server without touching the database.
  reference:
    - https://www.exploit.observer/?keyword=CVE-2026-59971&match=exact
    - https://subdomain.center/?engine=ammonites&keyword=mysql-mcp-server&match=exact
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    cvss-score: 10.0
    cve-id: CVE-2026-59971
    cwe-id: CWE-306
  metadata:
    verified: false
    max-request: 1
  tags: cve,cve2026,mysql-mcp-server,mcp,unauth
http:
  - method: GET
    path:
      - "{{BaseURL}}/"
    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "MySQL MCP Server is running"
      - type: status
        status:
          - 200