CVE-2026-44428
Last modified
CVE-2026-44428 is a medium-severity vulnerability rated 4.7/10 on the CVSS scale. The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the client-side and server-side GitHub OIDC flow is bound only to a global audience string, not to the specific registry instance being targeted. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the client-side and server-side GitHub OIDC flow is bound only to a global audience string, not to the specific registry instance being targeted. On the client side, the publisher always appends audience=mcp-registry when requesting the GitHub Actions ID token, regardless of the selected --registry URL. On the server side, the exchange endpoint validates only that same fixed audience and then derives publish permissions directly from repository_owner. As a result, a token legitimately obtained while interacting with one registry deployment remains acceptable to any other deployment that shares the same code and audience string. This vulnerability is fixed in 1.7.6.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Lfprojects | Mcp Registry | < 1.7.6 |
References
- https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-95c3-6vvw-4mrqMitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-44428?
How severe is CVE-2026-44428?
How do I fix CVE-2026-44428?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-44422FreeRDP is a free implementation of the Remote Desktop Proto…8.8
- CVE-2026-44423ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET …6.5
- CVE-2026-44424ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET …6.5
- CVE-2026-44425ShellHub is a centralized SSH gateway. Prior to 0.24.2, the …5.4
- CVE-2026-44426ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET …6.5
- CVE-2026-44427The MCP Registry provides MCP clients with a list of MCP ser…0
- CVE-2026-44429The MCP Registry provides MCP clients with a list of MCP ser…5.4
- CVE-2026-4443Heap buffer overflow in WebAudio in Google Chrome prior to 1…8.8
- CVE-2026-44430The MCP Registry provides MCP clients with a list of MCP ser…4
- CVE-2026-44431urllib3 is an HTTP client library for Python. From 1.23 to b…5.3
- CVE-2026-44432urllib3 is an HTTP client library for Python. From 2.6.0 to …7.5
- CVE-2026-44433Quicly is an IETF QUIC protocol implementation intended prim…7.5
Are you affected by CVE-2026-44428?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST