CyberRota Analysis
AI-GeneratedThe DeepSeek MCP Server, specifically versions 1.4.2 to 1.6.9, is vulnerable due to the `SessionStore` allowing unauthenticated session ID manipulation, enabling attackers to enumerate and hijack active sessions. This could lead to unauthorized access to ongoing conversations, compromising user privacy and data integrity. Organizations using affected versions should prioritize patching to version 1.7.0 to mitigate this significant security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.7.0, the process-global `SessionStore` accepts caller-supplied `session_id` values without binding them to any authenticated principal or transport session. An attacker can enumerate active session IDs via `deepseek_sessions`, then reuse a victim-controlled `session_id` in `deepseek_chat` to retrieve and continue the victim's conversation context. Version 1.7.0 contains a patch.