CVE-2026-44427— MCP Registry: Open Redirect
Possible ATT&CK Techniques 1AI
T1189 · Drive-by CompromiseAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| modelcontextprotocol | registry | >= 1.1.0, < 1.7.5 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-44427
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MCP Registry: Open Redirect
Source: NVD (National Vulnerability Database)
Vulnerability Description
The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. From 1.1.0 to 1.7.4, the TrailingSlashMiddleware in internal/api/server.go is vulnerable to an open redirect attack. An attacker can craft a URL with a protocol-relative path (e.g., //evil.com/) that, after trailing slash removal, results in a Location header of //evil.com — which browsers interpret as an absolute URL to an external domain. This vulnerability is fixed in 1.7.5.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Source: NVD (National Vulnerability Database)
Vulnerability Title
MCP Registry 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MCP Registry是Model Context Protocol开源的一个MCP服务器应用商店。 MCP Registry 1.1.0至1.7.4版本存在输入验证错误漏洞，该漏洞源于TrailingSlashMiddleware存在开放重定向攻击，攻击者可构造协议相对路径的URL，在移除尾部斜杠后生成Location头为//evil.com，浏览器将其解释为外部域绝对URL。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| modelcontextprotocol | registry | >= 1.1.0, < 1.7.5 | - |
II. Public POCs for CVE-2026-44427
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-44427
请登录查看更多情报信息。
Same Patch Batch · modelcontextprotocol · 2026-05-14 · 6 CVEs total
| CVE-2026-42559 | 8.8 HIGH | RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport |
| CVE-2026-45781 | 3.5 LOW | MCP Registry: OCI ownership validation fails open on upstream rate limits, allowing attack |
| CVE-2026-44429 | MCP Registry: Stored XSS in catalogue UI via attribute-quote breakout in publisher-control | |
| CVE-2026-44430 | MCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site- | |
| CVE-2026-44428 | MCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audi |
IV. Related Vulnerabilities
Same product: registry
Same vendor: modelcontextprotocol
- CVE-2026-44428
MCP Registry: GitHub OIDC tokens replayable across registry - CVE-2026-44429
MCP Registry: Stored XSS in catalogue UI via attribute-quote - CVE-2026-44430
MCP Registry: Unauthenticated SSRF: HTTP namespace verificat - CVE-2026-45781
MCP Registry: OCI ownership validation fails open on upstrea - CVE-2026-42559
RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP se
Same weakness: CWE-601
- CVE-2026-42207
Magento LTS: Open Redirect via Unvalidated `uenc` Parameter - CVE-2026-44520
Docling-Graph: SSRF via Missing Internal IP Validation in UR - CVE-2026-45448
ntopng - CWE-601: URL Redirection to Untrusted Site ('Open R - CVE-2026-44503
Kiota abstractions RedirectHandler leaks Cookie/Proxy-Author - CVE-2026-44372
Nitro: Open Redirect via Protocol-Relative URL Bypass in Wil
V. Comments for CVE-2026-44427
No comments yet