CVE-2026-61559

`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYNAMIC_API_URL=true` is set, the server reads the `X-GitLab-API-URL` HTTP request header and uses it as the base URL for all outbound GitLab API calls made within that request. The server validates that the value is a well-formed URL (`new URL(dynamicApiUrl)`) but applies no allowlist or hostname restriction. The server then attaches the victim's `Private-Token` to every outbound fetch that uses the redirected URL. Any caller who can reach the HTTP transport can set `X-GitLab-API-URL` to an attacker-controlled host. The next GitLab API call the server makes delivers the victim's token to that host. Version 2.1.27 contains a patch.

• CWE-918

• https://github.com/zereight/gitlab-mcp/commit/6ffb4cc70706fd05b1ab80901676bc2998b6db6d
• https://github.com/zereight/gitlab-mcp/pull/625
• https://github.com/zereight/gitlab-mcp/releases/tag/v2.1.27
• https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-2h44-8472-frjj

Published

Sep 15, 2026

Last Modified

Sep 15, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-61544libp2p-rust is the official Rust language implementation of …8.2
• CVE-2026-61549Woodpecker is a CI/CD engine. From 1.0.0 until 3.16.0, pipel…9
• CVE-2026-6155A weakness has been identified in Totolink A7100RU 7.4cu.231…9.8
• CVE-2026-61554emp3r0r is a C2 designed by Linux users for Linux environmen…7.5
• CVE-2026-61555OpenEXR is the reference implementation and specification fo…5.5
• CVE-2026-61556LiquidJS is a Shopify / GitHub Pages compatible template eng…8.7
• CVE-2026-6156A security vulnerability has been detected in Totolink A7100…9.8
• CVE-2026-61568`@zereight/mcp-gitlab` is a Model Context Protocol server fo…9.6
• CVE-2026-6157A vulnerability was detected in Totolink A800R 4.1.2cu.5137_…8.8
• CVE-2026-61574authentik is an open-source identity provider. Prior to 2026…8.8
• CVE-2026-6158A flaw has been found in Totolink N300RH 6.1c.1353_B20190305…7.3
• CVE-2026-6159A vulnerability has been found in code-projects Simple ChatB…4.3