Skip to content
Threat Feed
Subscribe

Vendor

Stacklok

1 brief RSS
high threat

ToolHive Containerized MCP Servers Vulnerable to Host Pivot and Lateral Movement

ToolHive versions prior to 0.30.1 enable insecure container network defaults that allow MCP servers to reach host services via host.docker.internal, enabling unauthenticated lateral movement and host API exploitation.

exploited ToolHive container-security mcp lateral-movement cve-2026-58197
3t 1c