Skip to content
Threat Feed
Subscribe

Tag

Genieacs

1 brief RSS
high advisory

DNS Rebinding Vulnerability in GenieACS MCP Streamable HTTP Transport

The genieacs-mcp package fails to validate Host and Origin headers on loopback listeners, allowing unauthorized web pages to perform DNS rebinding and invoke administrative GenieACS tools via an unauthenticated MCP interface.

genieacs-mcp dns-rebinding mcp genieacs remote-code-execution
1t 1c