CVE-2026-59971: MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)

September 11, 2026

In SSE/HTTP transport mode, mysql_mcp_server constructs SseServerTransport without passing security_settings. As a result, the MCP Python SDK’s DNS-rebinding protection (Origin/Host header validation) is disabled; the Starlette application has no CORS or TrustedHost middleware; and the service binds to 0.0.0.0 by default with no authentication on any route.

Trigger condition: MCP_TRANSPORT=sse. The default stdio mode is not affected.

References

github.com/advisories/GHSA-rqfv-2mw9-78g2
github.com/designcomputer/mysql_mcp_server/issues/92
github.com/designcomputer/mysql_mcp_server/releases/tag/v0.4.2
github.com/designcomputer/mysql_mcp_server/security/advisories/GHSA-rqfv-2mw9-78g2
nvd.nist.gov/vuln/detail/CVE-2026-59971

Code Behaviors & Features

Detect and mitigate CVE-2026-59971 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →