7.5High
CVE-2025-56404
Description
An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation.
Weakness (CWE):
CWE-20
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| mariadb | model context protocol | 0.1.0 |
References and patches
- https://github.com/MariaDB/mcp/issues/17 ExploitIssue Tracking
- https://github.com/August829/CVEP/issues/2 Issue Tracking
CPE matches (NVD) (1)
cpe:2.3:a:mariadb:model_context_protocol:0.1.0:*:*:*:*:*:*:*