CyberRota Analysis
AI-GeneratedThe vulnerability affects the GitHub MCP server, which improperly initializes its HTTP transport without enabling host allow-listing, allowing potential DNS rebinding attacks. This could enable an attacker to manipulate requests to the GitHub MCP endpoint from a malicious webpage, leading to unauthorized access or data exposure. Organizations using the affected GitHub services should prioritize applying the fix to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request whatever host it named, making the locally reachable GitHub MCP endpoint drivable from a page in a visitor's browser that pointed a name it controlled at the bound address. The fix passes the option explicitly alongside a dependency update; the update alone would not have closed it. The repository has published no release that brackets the fix, so the affected boundary is the commit preceding it.