Read the docs
TI-2026-79906 Aliases CVE-2026-57207

Missing authentication in NetBox MCP Server exposes all NetBox data

Priority MEDIUM 60CWE-1059Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-306.

Summary

NetBox MCP Server before 1.2.1 has no authentication on its HTTP endpoint when run with TRANSPORT=http. Missing authentication for a critical function (CWE-306) means any client that can reach the port gets a valid MCP session. An unauthenticated remote attacker with network access to the port gets full read access to all four NetBox tools and the NetBox data they expose.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

Description from the CNA

NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session and full access to all four NetBox tools - no token or credential needed. This issue has been patched in version 1.2.1.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00397 34th percentileScored 2026-11-07
Fix Fixed netbox-mcp-server (netboxlabs): 1.2.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
NetBox Labsnetbox-mcp-serverbefore 1.2.11.2.1Patch availableCNA
  • netbox-mcp-server VendorNetBox Labs Affected before 1.2.1 Fixed in 1.2.1 Patch available CNA

Remediation

Update netbox-mcp-server to version 1.2.1, which fixes this issue.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

  • Fix · CNA netbox-mcp-server (netboxlabs) Fixed in 1.2.1

Timeline

  1. 2026-10-23 Threatist record created from CVE-2026-57207
  2. 2026-10-24 Priority changed: MEDIUM → LOW
  3. 2026-10-30 CISA SSVC decision points changed
  4. 2026-10-30 Priority changed: LOW → MEDIUM

References

Other 2

  • TI-2023-12284 Hard-coded credentials in netbox-community netbox-docker CVSS 3.1CRITICAL 9.8
  • TI-2026-48522 NetBox 4.5.8 ORM Injection via WritableNestedSerializer CVSS 4.0HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences