Live › vulnerability › CVE-2026-111385
Go to dashboardNezha versions 2.1.0 through 2.3.14 build file transfer URLs in its mintTransferTool MCP handler from the unvalidated Host header of the incoming request. An attacker who controls the Host header on a victim's MCP request can redirect uploads or capture one-time download tokens and replay them to exfiltrate files.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run a self-hosted Nezha dashboard with its MCP server enabled and reachable by clients whose requests can carry attacker-chosen Host headers. Deployments where the MCP endpoint is only on a trusted internal network with fixed host routing have much less exposure. The sources do not describe whether a valid session is required.
No product ranges from the sources yet.
nezha-dashboard --version or the image tag in use; affected versions are 2.1.0 through 2.3.14.2.3.15 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.download_url and fs.upload_url transfer URLs from the unvalidated Host header. Attackers who control the Host header seen on a victim's MCP request can redirect file uploads or capture one-time download tokens and replay them to exfiltrate files.
This page as .md · .json · in your agent: get_signal("CVE-2026-111385")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.