TI-2026-32770 CVE-2026-44895 · GHSA-8jr5-6gvj-rfpf
GitLab MCP Server: SSE transport has no authentication and wildcard CORS, exposing all GitLab tools
Priority HIGH 81
GitLab MCP Server lets an AI agent talk directly to GitLab.
No yoda-digital vulnerabilities are listed in CISA KEV.
1 record
GitLab MCP Server lets an AI agent talk directly to GitLab.