Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

MetaMCP 2.4.22 can run code via internal proxy

CVE-2026-79538 · published 19 days ago
Summary

The MetaMCP software (versions up to 2.4.22) has an internal feature that can be tricked into executing arbitrary commands. An attacker who can reach the internal /mcp-proxy/server/stdio address could cause the system to run their own code, potentially compromising data or services. Apply the latest update from the vendor or disable that internal proxy endpoint until the fix is installed.

Original advisory text
metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (createTransport, STDIO branch, routers/mcp-p...
metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (createTransport, STDIO branch, routers/mcp-proxy/server.ts).
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published29 Sep 2026
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2026-79538 · NVD
CVE-2026-79538 · MITRE
Track software like this
Free during beta