Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-57496— NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction

Quick assessment

Affected
Labs64 NetLicensing-MCP
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

以下是该漏洞描述信息的中文翻译： NetLicensing MCP Server 是一个自然语言接口，使智能体（agentic）应用程序能够在 Labs64 NetLicensing 中管理软件许可生命周期。在版本 0.1.8 之前， 函数将调用者控制的 参数传递给 ，该参数随后被插值到一个由 中的 函数消费的 REST API 路径中，且未进行路径段（path-segment）验证。攻击者可以通过利用路径遍历（traversal）段，将原本预期的产品路径规范化为 端点。由于响应通过 而非 进行序列化，从而绕过了对

CVSS 9.6 · Critical

Affected Version Matrix 1

VendorProduct Version RangeStatus
Labs64 NetLicensing-MCP < 0.1.8 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-57496

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction
Source: CVE Program / CVE List V5
Vulnerability Description
NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.8, netlicensing_get_product passes the caller-controlled product_number to src/netlicensing_mcp/tools/products.py, which interpolates it into a REST path consumed by nl_get() in src/netlicensing_mcp/client.py without path-segment validation. A traversal segment can be normalized from the intended product path to the /token endpoint, after which the response is serialized through _wrap_json instead of _wrap_json_token_read, bypassing redact_token_read() protections for APIKEY number and SHOP shopURL fields. An authenticated MCP client with a non-administrative API key can retrieve plaintext token values, and a recovered administrative token can provide broad read, write, and delete access to the NetLicensing account. This issue is fixed in version 0.1.8.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Labs64 NetLicensing-MCP < 0.1.8 -

II. Public POCs for CVE-2026-57496

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-57496

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-57496 (2)

Vendor Advisories for CVE-2026-57496 (1)

Vendor Pages for CVE-2026-57496 (1)

IV. Related Vulnerabilities

Same product: NetLicensing-MCP
Same vendor: Labs64
Same weakness: CWE-22

V. Comments for CVE-2026-57496

No comments yet

Leave a comment