@andrea9293/mcp-documentation-server: Web UI API binds to all interfaces without authentication by default
- Product
- @andrea9293/mcp-documentation-server
- CVE
- CVE-2026-54504
- Affected
- 1.13.0
- Fixed in
- 1.13.1
Last verified against sources: October 26, 2026
Am I affected?
@andrea9293/mcp-documentation-server: affected 1.13.0. Fixed in 1.13.1.
- Check your version: run
npm ls @andrea9293/mcp-documentation-server. Versions = 1.13.0 of @andrea9293/mcp-documentation-server are affected. [1]
What to do now
- Upgrade to the fixed version: run
npm install @andrea9293/mcp-documentation-server@1.13.1(first patched version 1.13.1). [1] - Set START_WEB_UI=false to disable the Web UI. [1]
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
What happened
- The Web UI/API appears to bind to all network interfaces by default (*:3080 / 0.0.0.0:3080) instead of localhost-only, and its document-management API endpoints do not require authentication. [1]
- Any network-reachable client on the same LAN, VM network, or container bridge can access the document-admin API without credentials. [1]
- In my reproduction, I was able to enumerate documents, add a document, read its full content, search across the corpus, and delete the document through the host's LAN IP. [1]
Impact
- A network-reachable attacker can access the document-management API without credentials. [1]
- Depending on what the user stores in the documentation server, this may allow reading document titles, previews, and full document contents; searching across the entire document corpus; inserting attacker-controlled documents into the corpus; deleting documents; tampering with the user's local knowledge base used by the MCP assistant. [1]
- This is not a claim for unauthenticated remote code execution. [1]
What was done
- The package was patched in version 1.13.1. [1]
Sources
- GHSA-6f5r-5672-72j7 — GitHub Advisory Database
Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.
Share advisory brief with your team
Copy a plain-text summary for Slack, GitHub issues, or team security channels.
[CVE-2026-54504] @andrea9293/mcp-documentation-server: Web UI API binds to all interfaces without authentication by default
Product: @andrea9293/mcp-documentation-server | Affected: 1.13.0 | Fixed in: 1.13.1
Summary: The Web UI/API appears to bind to all network interfaces by default (*:3080 / 0.0.0.0:3080) instead of localhost-only, and its document-management API endpoints do not require authentication.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/07/cve-2026-54504-andrea9293-mcp-documentation-serverCorrections
Report an error or request a correction. We review requests within 5 business days and add a dated correction note.
Discussions for CVE-2026-54504
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.