The mcp-gitlab server is vulnerable to Server-Side Request Forgery (SSRF) when ENABLE_DYNAMIC_API_URL is enabled, allowing attackers to force the server to forward victim GitLab tokens to an arbitrary host.
mcp-gitlab +2
dns-rebinding
mcp
gitlab
cve-2026-61568
vulnerability
rce
exfiltration
1r
6t
1c
updated