Read the docs
TI-2026-36530 Aliases CVE-2026-49357GHSA-4hf8-5mjm-rfgq

Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authentication

Priority MEDIUM 45CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · Low · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-306.

Summary

Line Desktop MCP is a project that, while unaffiliated with the official line-bot-mcp-server, allows users to directly operate the LINE Desktop application on Windows or Mac via MCP. `line-desktop-mcp` supports a `--http-mode` Streamable HTTP transport for use with clients such as n8n. In this mode the server binds to `0.0.0.0` and exposes the MCP `/mcp` endpoint without an MCP-layer authentication check. Prior to version 1.1.2, any network client that can reach the port can initialize a session, list tools, and call tools that read LINE Desktop chat history or send LINE messages through the already logged-in desktop application. Version 1.1.2 fixes the issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00564 47th percentileScored 2026-11-07
Fix Fixed line-desktop-mcp (dtwang): 1.1.2line-desktop-mcp (npm): 1.1.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
dtwangline-desktop-mcpbefore 1.1.21.1.2Patch availableCNA
—line-desktop-mcp (npm)before 1.1.21.1.2Patch availableGHSA-4hf8-5mjm-rfgq
  • line-desktop-mcp Vendordtwang Affected before 1.1.2 Fixed in 1.1.2 Patch available CNA
  • line-desktop-mcp (npm) Vendor— Affected before 1.1.2 Fixed in 1.1.2 Patch available GHSA-4hf8-5mjm-rfgq

Remediation

  • Fix · CNA line-desktop-mcp (dtwang) Fixed in 1.1.2
  • Fix · GHSA-4hf8-5mjm-rfgq line-desktop-mcp (npm) Fixed in 1.1.2 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-49357
  2. 2026-10-03 Alias added: GHSA-4hf8-5mjm-rfgq

References

Advisory 1

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences