Live › vulnerability › CVE-2026-117570
Go to dashboardThe nmap-mcp server's scan_vulnerabilities tool fails to enforce its allowlist, so callers can pass blocked NSE script categories such as exploit, dos, brute, or intrusive to nmap. A caller, or an agent steered by prompt injection, can therefore launch exploit, brute-force, or denial-of-service scripts against scan targets.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams that run the Vorota-ai nmap-mcp server and expose its scan_vulnerabilities tool to MCP clients or agents that process untrusted input. Exposure depends on whether those callers can reach the server and whether it can scan hosts you do not own. Teams that do not run this server can skip it.
No product ranges from the sources yet.
3636afa or earlier, for example with git log --oneline | grep 3636afa in the nmap-mcp checkoutEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script, running intrusive, brute-force, exploit, or denial-of-service scripts against scan targets.
This page as .md · .json · in your agent: get_signal("CVE-2026-117570")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.