CVE-2026-61560: Unauthenticated Remote Path Traversal and Access Token Exfiltration in @zereight/mcp-gitlab
Vulnerability ID: CVE-2026-61560
CVSS Score: 9.8
Published: 2026-09-16
CVE-2026-61560 is a critical security vulnerability in the @zereight/mcp-gitlab Server-Sent Events (SSE) server. By utilizing default, unauthenticated route setups and exposing vulnerable administrative tools, remote attackers can execute path traversal attacks to read internal process variables and hijack GitLab operations.
TL;DR
Unauthenticated remote attackers can read sensitive local container files and hijack GitLab accounts by abusing exposed Server-Sent Events endpoints and path traversal in the upload_markdown tool of @zereight/mcp-gitlab.
⚠️ Exploit Status: POC
Technical Details
- CWE ID: CWE-22 / CWE-306
- Attack Vector: Network
- CVSS Score: 9.8
- EPSS Score: 0.00703
- EPSS Percentile: 51.56%
- Exploit Status: PoC / Conceptual
- KEV Status: Not Listed
Affected Systems
- @zereight/mcp-gitlab
-
@zereight/mcp-gitlab: < 2.1.27 (Fixed in:
2.1.27)
Code Analysis
Commit: e436ee4
Implement authentication checks, restrict Docker network exposures, and drop root privileges in runtime execution context.
Mitigation Strategies
- Enforce authentication on SSE transport by defining SSE_AUTH_TOKEN.
- Bind the integration port exclusively to the local loopback interface (127.0.0.1).
- Upgrade @zereight/mcp-gitlab to version 2.1.27 or higher.
Remediation Steps:
- Verify the installed package version of @zereight/mcp-gitlab is 2.1.27 or higher.
- Configure the application host variable to HOST=127.0.0.1.
- Generate and apply a secure SSE_AUTH_TOKEN in the server environment variables.
- Review and rotate active GitLab Personal Access Tokens used by the deployment.
References
Read the full report for CVE-2026-61560 on our website for more details including interactive diagrams and full exploit analysis.
Top comments (0)