Skip to content
Threat Feed
Subscribe

Vendor

Sylphx

1 brief RSS
high advisory

sylphx pdf-reader-mcp: HTTP transport authentication bypass (CVE-2026-62264)

The @sylphx/pdf-reader-mcp package contains an authentication bypass vulnerability in its HTTP transport implementation that exposes local files and PDF tools to unauthorized network requests.

pdf-reader-mcp authentication-bypass cve-2026-62264 mcp nodejs
2t 1c