TI-2026-26496 CVE-2026-34200
Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Port
Priority HIGH 69
Nhost is an open source Firebase alternative with GraphQL.
nhost
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
nhost records in CISA KEVNo nhost vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2026-35178 CVE-2026-47671 · GHSA-64cj-qvx5-m4f3
Missing authentication in nhost cli
Priority MEDIUM 58
Nhost is an open source Firebase alternative with GraphQL.
TI-2026-30129 CVE-2026-41574 · GHSA-6g38-8j4p-j3pr
Nhost Vulnerable to Account Takeover via OAuth Email Verification Bypass
Priority MEDIUM 49
Nhost is an open source Firebase alternative with GraphQL.
TI-2026-27191 CVE-2026-34969 · GHSA-g2qj-prgh-4g9r
Nhost Leaks the Refresh Token via URL Query Parameter in OAuth Provider Callback
Priority MEDIUM 45
Nhost is an open source Firebase alternative with GraphQL.
TI-2026-25642 CVE-2026-33221 · GHSA-g9f6-9775-hffm
Nhost Storage Affected by MIME Type Spoofing via Trusted Client Content-Type Header in Storage Upload
Priority LOW 10
Nhost is an open source Firebase alternative with GraphQL.