Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.6

zereight/mcp-gitlab can leak GitLab token via header

CVE-2026-61559 · published 27 days ago
Summary

The zereight/mcp-gitlab component that connects to GitLab may forward a user’s private token to any website an attacker specifies, if a certain setting is enabled. This can let an attacker capture the token and access the victim’s GitLab account. Update to version 2.1.27 or later, or disable the dynamic API URL feature, to stop the risk.

What to do
  • Update zereight mcp-gitlab to version 2.1.27.
Affected software
Ecosystem VendorProductAffected versions
– zereight gitlab-mcp >= 0.0.1, < 2.1.27
npm zereight mcp-gitlab >= 0.0.1, < 2.1.27
Fix: upgrade to 2.1.27
Original advisory text
@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYNAMIC_API_URL=true` is set, the server reads the `X-GitLab-API-URL` HTTP request header and uses it as the base URL for all outbound GitLab API calls made within that request. The server validates that the value is a well-formed URL (`new URL(dynamicApiUrl)`) but applies no allowlist or hostname restriction. The server then attaches the victim's `Private-Token` to every outbound fetch that uses the redirected URL. Any caller who can reach the HTTP transport can set `X-GitLab-API-URL` to an attacker-controlled host. The next GitLab API call the server makes delivers the victim's token to that host. Version 2.1.27 contains a patch.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.6 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published15 Sep 2026
Updated11 Oct 2026
First seen15 Sep 2026
Sources
CVE-2026-61559 · NVD
CVE-2026-61559 · MITRE
GHSA-2h44-8472-frjj · GHSA
CVE-2026-61559 · OSV
Track software like this
Free during beta