CVE-2026-81102— Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation
Quick assessment
Affected
dropbox mcp-server-dash
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
以下是对该漏洞描述的中文翻译： 该 Dash MCP 服务器将其监听器绑定到回环地址（loopback address），但从未检查请求中携带的主机名（Host header）。在 中，服务器以“网络模式”构建时，接口被限制为回环地址，且未配置任何传输层安全设置。因此，即使请求的目标是回环地址，若请求中携带了攻击者指定的主机名，该请求仍能到达监听器。这意味着，访客浏览器中的网页可以驱动本地服务器，并以服务器持有的 Dropbox 凭证调用其“公司搜索”和“文件详情”等工具。通过这种方式，只有“网络模式”是可被影响的
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| dropbox | mcp-server-dash | 84567b74e3c72e42d5e50ee07c56864613f519c2 |
unaffected |
< 84567b74e3c72e42d5e50ee07c56864613f519c2 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-81102
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation
Source: CVE Program / CVE List V5
Vulnerability Description
The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcp_server_dash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback address still reached the listener while carrying the attacker's host name. A page in a visitor's browser could therefore drive the local server and invoke its company-search and file-detail tools under the Dropbox credential the server holds. Only the network mode was reachable this way; the standard input mode was not. The fix supplies transport-security settings that enable host checking and allow only the loopback name and port, rejecting other hosts before a tool runs. The repository publishes no versions, so the affected boundary is the commit preceding the fix.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
源验证错误
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| dropbox | mcp-server-dash | 0 ~ 84567b74e3c72e42d5e50ee07c56864613f519c2 | - |
|
II. Public POCs for CVE-2026-81102
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-81102
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-81102 (1)
Vendor Advisories for CVE-2026-81102 (1)
Other References for CVE-2026-81102 (1)
IV. Related Vulnerabilities
Same vendor: dropbox
-
CVE-2026-53424
Missing one-time-use enforcement in Samly allows replay of S -
CVE-2026-53425
Missing InResponseTo validation in Samly allows acceptance o -
CVE-2026-28809
XXE in esaml SAML library allows local file read and potenti -
CVE-2024-5924
Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulner -
CVE-2022-4768
Dropbox merou SSH Public Key public_key.py add_public_key in
Same weakness: CWE-346
-
CVE-2026-81100
Timescale tiger-gh-mcp-server DNS Rebinding via Disabled Hos -
CVE-2026-81099
Timescale tiger-slack DNS Rebinding via Disabled Host Header -
CVE-2026-81095
Timescale pg-aiguide through 0.5.0 DNS Rebinding via Disable -
CVE-2026-81092
mcp-go before 0.56.0 Missing Host Header Validation Enables -
CVE-2026-55637
genieacs-mcp: DNS rebinding reaches local GenieACS MCP Strea
V. Comments for CVE-2026-81102
No comments yet