Skip to content
Threat Feed
Subscribe

Product

Mysql_mcp_server (< 0.4.2)

1 brief RSS
critical advisory

Unauthenticated SQL Execution and RCE in MySQL MCP Server via SSE Transport

The mysql_mcp_server package (v < 0.4.2) fails to implement security protections in SSE transport mode, enabling unauthenticated attackers to perform arbitrary SQL execution, data exfiltration, and potential remote code execution.

mysql_mcp_server vulnerability rce sql-injection mcp
2t