CVE-2026-11624
A critical vulnerability in the Model Context Protocol allows attackers to bypass security checks by exploiting the lack of origin validation before version 0.25.0. The issue can be mitigated by upgrading to v0.25.0 or later and configuring host restrictions.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Users running the Model Context Protocol before version 0.25.0, especially those that have not set the --allowed-hosts or --allowed-origins flags.
Real-world impact
An attacker could perform DNS rebinding attacks, potentially gaining unauthorized access or executing commands on the server.
Why this severity
The CVSS score of 9.4 reflects the high impact of a successful attack: it requires no authentication, can be performed over the network, and can compromise confidentiality, integrity, and availability of the system.
What to do about it
- 01Upgrade the Model Context Protocol to version 0.25.0 or later.
- 02Configure the --allowed-hosts or --allowed-origins flag to specify permitted hosts instead of the default "*".
- 03Restart the server to apply the new configuration.
NVD-referenced vendor advisory
Timeline
- Jun 13, 2026 · Jun 13, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 23, 2026 · 12d agoAdvisory updatedThe NVD record was last revised.
- Jul 23, 2026 · 12d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.