Tag

Cve-2026-61568

1 brief RSS

SSRF Vulnerability in mcp-gitlab Enables GitLab Credential Theft

The mcp-gitlab server is vulnerable to Server-Side Request Forgery (SSRF) when ENABLE_DYNAMIC_API_URL is enabled, allowing attackers to force the server to forward victim GitLab tokens to an arbitrary host.

mcp-gitlab +2 dns-rebinding mcp gitlab cve-2026-61568 vulnerability rce exfiltration

1r 6t 1c updated 2d ago