Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:mysql_mcp_server_project:mysql_mcp_server:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Unauthenticated SQL Execution and RCE in MySQL MCP Server via SSE Transport

The mysql_mcp_server package (v < 0.4.2) fails to implement security protections in SSE transport mode, enabling unauthenticated attackers to perform arbitrary SQL execution, data exfiltration, and potential remote code execution.

mysql_mcp_server vulnerability rce sql-injection mcp
2t