Read the docs
TI-2026-39309 Aliases CVE-2026-54446GHSA-x9vc-9ffq-p3gj

NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode

Priority HIGH 70CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-306.

Summary

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Authorization: Bearer, and the apikey query parameter pass through ApiKeyMiddleware in src/netlicensing_mcp/server.py without authentication. The downstream api_key_ctx in src/netlicensing_mcp/client.py then falls back to the operator's NETLICENSING_API_KEY and authenticates upstream NetLicensing REST API calls under the operator account. An unauthenticated attacker can invoke MCP tools to enumerate products, licenses, licensees, and transactions, create or modify licensing objects, perform validations, and execute destructive delete operations. The issue affects HTTP deployments configured with a server-side key and does not require user interaction. This issue is fixed in version 0.1.6.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00619 49th percentileScored 2026-11-07
Fix Fixed NetLicensing-MCP (Labs64): 0.1.6netlicensing-mcp (PyPI): 0.1.6

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Labs64NetLicensing-MCPbefore 0.1.60.1.6Patch availableCNA
—netlicensing-mcp (PyPI)before 0.1.60.1.6Patch availableGHSA-x9vc-9ffq-p3gj
  • NetLicensing-MCP VendorLabs64 Affected before 0.1.6 Fixed in 0.1.6 Patch available CNA
  • netlicensing-mcp (PyPI) Vendor— Affected before 0.1.6 Fixed in 0.1.6 Patch available GHSA-x9vc-9ffq-p3gj

Remediation

  • Fix · CNA NetLicensing-MCP (Labs64) Fixed in 0.1.6
  • Fix · GHSA-x9vc-9ffq-p3gj netlicensing-mcp (PyPI) Fixed in 0.1.6 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-54446
  2. 2026-10-03 Alias added: GHSA-x9vc-9ffq-p3gj

References

Other 4

  • TI-2026-74648 Path traversal in NetLicensing MCP Server exposes plaintext tokens CVSS 3.1CRITICAL 9.6
  • TI-2024-36379 WordPress PluginPass plugin <= 0.9.10 - Arbitrary File Download/Delete vulnerability CVSS 3.1HIGH 8.6
  • TI-2024-35049 WordPress DigiPass plugin <= 0.3.0 - Arbitrary File Download vulnerability CVSS 3.1HIGH 7.5
  • TI-2023-26811 WordPress Credit Tracker Plugin <= 1.1.17 is vulnerable to Cross Site Scripting (XSS) CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences