Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

MySQL MCP Server allows unauthenticated SQL execution

CVE-2026-59971 · published 27 days ago
Summary

The MySQL MCP Server (versions before 0.4.2) can be started with a setting that opens a web‑based channel without any login checks and listens on all network interfaces. An attacker on the same network, or a malicious web page using DNS tricks, could send SQL commands to the server, potentially reading, changing or even writing files on the host. Upgrade to version 0.4.2 or later, or disable the insecure setting, to close the gap.

What to do
  • Update mysql-mcp-server to version 0.4.2.
  • Update dana k. williams mysql-mcp-server to version 0.4.2.
Affected software
Ecosystem VendorProductAffected versions
pip – mysql-mcp-server < 0.4.2
Fix: upgrade to 0.4.2
pip dana k. williams mysql-mcp-server < 0.4.2
Fix: upgrade to 0.4.2
– designcomputer mysql_mcp_server < 0.4.2
Original advisory text
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCP_TRANSPORT=sse causes src/mysql_mcp_server/server.py to construct SseServerTransport without security_settings or enable_dns_rebinding_protection, while the Starlette routes /, /sse, and /messages/ have no authentication and the service binds to 0.0.0.0 by default. A network attacker can directly reach execute_sql, or can use DNS rebinding to make a victim's browser relay same-origin requests to a locally bound service, and supply a query that reaches cursor.execute(query). This allows unauthenticated disclosure and modification of the configured database; when the MySQL account has FILE privileges, the same access can read or write server files and may enable code execution. The default stdio transport is not affected. This issue is fixed in 0.4.2.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
10.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
CWE-346Origin Validation Error
Timeline
Published15 Sep 2026
Updated11 Oct 2026
First seen11 Sep 2026
Sources
GHSA-rqfv-2mw9-78g2 · GHSA
CVE-2026-59971 · NVD
CVE-2026-59971 · MITRE
CVE-2026-59971 · OSV
PYSEC-2026-4109 · OSV
Track software like this
Free during beta