TI-2026-74648 Aliases CVE-2026-57496 GHSA-hxpf-9xvq-wph8

Path traversal in NetLicensing MCP Server exposes plaintext tokens

HIGH 76CWE-22Published 2026-10-15 · Updated 2026-10-21

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

Labs64 NetLicensing MCP Server before 0.1.8 contains a path traversal flaw (CWE-22) in the netlicensing_get_product tool. An authenticated MCP client with a non-administrative API key can use a crafted product number to reach the token endpoint and read plaintext token values. A recovered administrative token gives broad read, write and delete access to the NetLicensing account.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.8, netlicensing_get_product passes the caller-controlled product_number to src/netlicensing_mcp/tools/products.py, which interpolates it into a REST path consumed by nl_get() in src/netlicensing_mcp/client.py without path-segment validation. A traversal segment can be normalized from the intended product path to the /token endpoint, after which the response is serialized through _wrap_json instead of _wrap_json_token_read, bypassing redact_token_read() protections for APIKEY number and SHOP shopURL fields. An authenticated MCP client with a non-administrative API key can retrieve plaintext token values, and a recovered administrative token can provide broad read, write, and delete access to the NetLicensing account. This issue is fixed in version 0.1.8.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00435 38th percentileScored 2026-11-07

Fix Fixed NetLicensing-MCP (Labs64): 0.1.8netlicensing-mcp (PyPI): 0.1.8

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Labs64	NetLicensing-MCP	before 0.1.8	0.1.8	Patch available	CNA
—	netlicensing-mcp (PyPI)	before 0.1.8	0.1.8	Patch available	GHSA-hxpf-9xvq-wph8

NetLicensing-MCP VendorLabs64 Affected before 0.1.8 Fixed in 0.1.8 Patch available CNA
netlicensing-mcp (PyPI) Vendor— Affected before 0.1.8 Fixed in 0.1.8 Patch available GHSA-hxpf-9xvq-wph8

Remediation

Upgrade the netlicensing-mcp PyPI package to version 0.1.8, which fixes this issue. The sources list no fixed version for Labs64 NetLicensing-MCP.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Fix · CNA NetLicensing-MCP (Labs64) Fixed in 0.1.8
Fix · GHSA-hxpf-9xvq-wph8 netlicensing-mcp (PyPI) Fixed in 0.1.8 Advisory →

Timeline

2026-10-16 Threatist record created from CVE-2026-57496
2026-10-16 Alias added: GHSA-hxpf-9xvq-wph8
2026-10-21 CISA SSVC decision points changed
2026-10-21 Priority changed: MEDIUM → HIGH

References

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-57496

Other 6

TI-2026-39309 NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode CVSS 3.1HIGH 8.1
TI-2024-36379 WordPress PluginPass plugin <= 0.9.10 - Arbitrary File Download/Delete vulnerability CVSS 3.1HIGH 8.6
TI-2024-35049 WordPress DigiPass plugin <= 0.3.0 - Arbitrary File Download vulnerability CVSS 3.1HIGH 7.5
TI-2023-26811 WordPress Credit Tracker Plugin <= 1.1.17 is vulnerable to Cross Site Scripting (XSS) CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences