{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2026-62264/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:sylphx:pdf-reader-mcp:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-62264"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["pdf-reader-mcp (\u003c 3.0.1)"],"_cs_severities":["high"],"_cs_tags":["authentication-bypass","cve-2026-62264","mcp","nodejs"],"_cs_type":"advisory","_cs_vendors":["sylphx"],"content_html":"\u003cp\u003eThe @sylphx/pdf-reader-mcp package (v2.2.0 through 3.0.0) fails to enforce the \u003ccode\u003eX-API-Key\u003c/code\u003e header when the HTTP transport is enabled. Despite configuring an \u003ccode\u003eMCP_API_KEY\u003c/code\u003e, the application fails to validate the key, resulting in the \u003ccode\u003e/mcp\u003c/code\u003e endpoint accepting unauthenticated requests. Because the default bind address is \u003ccode\u003e0.0.0.0\u003c/code\u003e, any actor with network access to the server can execute PDF parsing tools and access arbitrary files accessible to the application process.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthorized actors to read any PDF file accessible to the server process and leverage PDF parsing tools. The vulnerability also supports limited Server-Side Request Forgery (SSRF) capabilities. The issue is exacerbated by misleading startup logs that incorrectly confirm authentication as enabled.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to \u003ccode\u003e@sylphx/pdf-reader-mcp@3.0.1\u003c/code\u003e or later, which enforces API key validation and defaults to loopback-only binding.\u003c/li\u003e\n\u003cli\u003eIf immediate patching is not possible, restrict network exposure by setting \u003ccode\u003eMCP_HTTP_HOST\u003c/code\u003e to \u003ccode\u003e127.0.0.1\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eImplement a reverse proxy with authentication enforcement in front of any instances exposed to non-local networks.\u003c/li\u003e\n\u003cli\u003eRestrict filesystem access by explicitly defining \u003ccode\u003eMCP_PDF_ALLOWED_DIRS\u003c/code\u003e for the server process.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T18:38:00Z","date_published":"2026-10-29T18:38:00Z","id":"https://feed.craftedsignal.io/briefs/2026-10-sylphx-pdf-reader-mcp-auth-bypass/","summary":"The @sylphx/pdf-reader-mcp package contains an authentication bypass vulnerability in its HTTP transport implementation that exposes local files and PDF tools to unauthorized network requests.","title":"sylphx pdf-reader-mcp: HTTP transport authentication bypass (CVE-2026-62264)","url":"https://feed.craftedsignal.io/briefs/2026-10-sylphx-pdf-reader-mcp-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2026-62264","version":"https://jsonfeed.org/version/1.1"}