Skip to content
Threat Feed
Subscribe

Product

Mcp-Gitlab

1 brief RSS
high advisory

CVE-2026-61462 - mcp-gitlab Path Traversal Vulnerability Leading to Unauthorized API Access

A path traversal vulnerability, CVE-2026-61462, in the job_id parameter of build/index.js within mcp-gitlab allows attackers to redirect GitLab API requests to arbitrary endpoints by escaping the intended path prefix, leveraging the operator's personal access token for unauthorized access.

mcp-gitlab path-traversal gitlab web-vulnerability cve
1r 2t 1c