DEV Community

CVE Reports
CVE Reports

Posted on Originally published at cvereports.com

CVE-2026-55605: CVE-2026-55605: Missing Authentication in @arikusi/deepseek-mcp-server HTTP Transport Endpoint

#security #cve #cybersecurity

CVE-2026-55605: Missing Authentication in @arikusi/deepseek-mcp-server HTTP Transport Endpoint

Vulnerability ID: CVE-2026-55605
CVSS Score: 5.3
Published: 2026-08-25

The self-hosted HTTP transport mode of @arikusi/deepseek-mcp-server (an MCP server for DeepSeek V4) exposes its JSON-RPC endpoint (POST /mcp) without authentication in versions 1.4.2 through 1.7.0. Unauthenticated clients can establish Model Context Protocol sessions and invoke tools, consuming the host's configured DeepSeek API key.

TL;DR

Unauthenticated remote attackers can query DeepSeek models and deplete system quotas via an exposed JSON-RPC endpoint on port 3000.

⚠️ Exploit Status: POC

Technical Details

  • CWE ID: CWE-306
  • Attack Vector: Network (AV:N)
  • CVSS v3.1: 5.3 (Medium)
  • Exploit Status: Proof-of-Concept
  • CISA KEV Status: Not Listed
  • Affected Component: HTTP Transport Mode (transport-http.ts)

Affected Systems

  • @arikusi/deepseek-mcp-server
  • @arikusi/deepseek-mcp-server: >= 1.4.2, < 1.8.0 (Fixed in: 1.8.0)

Mitigation Strategies

  • Upgrade to version 1.8.0 or higher
  • Configure HTTP_AUTH_TOKEN environment variable
  • Restrict service binding to localhost (127.0.0.1)

Remediation Steps:

  1. Update NPM dependencies to retrieve the patched package version.
  2. Set the HTTP_AUTH_TOKEN environment variable to a strong, generated secret.
  3. Modify Docker Compose or host binding configurations to prevent exposure to untrusted networks.

Read the full report for CVE-2026-55605 on our website for more details including interactive diagrams and full exploit analysis.

Top comments (0)