CVE-2026-61560 Scanner
CVE-2026-61560 Scanner - Unauthenticated File Read vulnerability in GitLab MCP Server
Used 4 times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-61560
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes all MCP tools without any authentication. The `upload_markdown` tool reads arbitrary files from the server's local filesystem via an unsanitized `file_path` parameter and uploads them to a GitLab project. Combined, any unauthenticated network-reachable attacker can read `/proc/self/environ` to steal the server's `GITLAB_PERSONAL_ACCESS_TOKEN` and achieve full GitLab account takeover. This is the default configuration for Docker deployments. Version 2.1.27 contains a patch.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
gitlab-mcp
Updated Nov 6, 2026View on NVD →
S4E scanner
CVE history: gitlab-mcp
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →