CVE-2026-61560
Description
@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (SSE=true) exposes all MCP tools without any authentication. The upload_markdown tool reads arbitrary files from the server's local filesystem via an unsanitized file_path parameter and uploads them to a GitLab project. Combined, any unauthenticated network-reachable attacker can read /proc/self/environ to steal the server's GITLAB_PERSONAL_ACCESS_TOKEN and achieve full GitLab account takeover. This is the default configuration for Docker deployments. Version 2.1.27 contains a patch.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
@zereight/mcp-gitlabnpm | < 2.1.27 | 2.1.27 |
Affected products
1- Range: <2.1.27
Patches
Vulnerability mechanics
References
8- github.com/advisories/GHSA-cv3r-c5h8-f4g5ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-61560ghsaADVISORY
- github.com/zereight/gitlab-mcp/commit/e436ee4ad067b64584ec9312c9e9c9a2641c1976ghsaWEB
- github.com/zereight/gitlab-mcp/pull/482nvdWEB
- github.com/zereight/gitlab-mcp/pull/554nvdWEB
- github.com/zereight/gitlab-mcp/pull/622nvdWEB
- github.com/zereight/gitlab-mcp/releases/tag/v2.1.27ghsaWEB
- github.com/zereight/gitlab-mcp/security/advisories/GHSA-cv3r-c5h8-f4g5nvdWEB
News mentions
0No linked articles in our index yet.