{"id":"CVE-2026-120450","kind":"vulnerability","aliases":["CVE-2026-120450"],"related":[],"title":"LaraDashboard: read-only users can send arbitrary email via MCP tool","description":"LaraDashboard 1.4.0 before 1.4.9 contains an improper authorization vulnerability that allows authenticated users with read-only email_template.view permission to send arbitrary emails via the MCP send-email tool. Attackers can mint an MCP token and call send-email with any recipient, subject, and raw HTML body to deliver phishing or spam from the site's mailer.","summary":"LaraDashboard 1.4.0 before 1.4.9 lets an authenticated user with only read-only email template permission call the MCP send-email tool. An attacker can use it to send arbitrary phishing or spam from the site's own mailer.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","laradashboard","laravel","mcp","self-hosted"],"not_affected_if":["mcp-disabled","version-1.4.9-or-later"],"how_to_check":"- Check the installed LaraDashboard version and whether it is below `1.4.9`\n- Confirm whether the MCP server is enabled and which roles hold `email_template.view`\n- Review mail logs for unexpected outbound messages sent through the MCP send-email tool","fix":"- Upgrade LaraDashboard to `1.4.9` or later (the fixed version named in the sources)","status":"open","published_at":"2026-11-02T15:17:28+00:00","first_seen_at":"2026-11-02T15:24:03+00:00","triaged_at":"2026-11-02T15:26:27+00:00","updated_at":"2026-11-02T15:26:27+00:00","category":"ai-tooling","confidence":0.8,"triage":{"at":"2026-11-02T15:26:27Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade LaraDashboard to `1.4.9` or later (the fixed version named in the sources)","reach":"internet","title":"LaraDashboard: read-only users can send arbitrary email via MCP tool","impact":"medium","summary":"LaraDashboard 1.4.0 before 1.4.9 lets an authenticated user with only read-only email template permission call the MCP send-email tool. An attacker can use it to send arbitrary phishing or spam from the site's own mailer.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["laradashboard","mcp","laravel","self-hosted"],"confidence":0.8,"fix_status":"available","needs_auth":"yes","worst_case":"Attacker sends phishing or spam from the site's mailer to any recipient","analyst_note":"","how_to_check":"- Check the installed LaraDashboard version and whether it is below `1.4.9`\n- Confirm whether the MCP server is enabled and which roles hold `email_template.view`\n- Review mail logs for unexpected outbound messages sent through the MCP send-email tool","plain_action":"","needs_analyst":false,"not_affected_if":["version-1.4.9-or-later","mcp-disabled"],"who_is_affected":"Teams running LaraDashboard from 1.4.0 up to but not including 1.4.9 that have the MCP send-email tool reachable by authenticated users. Users with only read-only email template access can abuse it, so the risk depends on how many accounts exist and who holds that permission. Installations on versions 1.4.9 or later, or without the MCP server, are not affected.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000721,"input_tokens":4223,"output_tokens":598,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-120450':15A,18A '-2026':14A,17A '1.4.0':29B,69C '1.4.9':31B,71C 'ai':20B 'ai-tool':19B 'allow':78C 'arbitrari':8A,58B,89C 'attack':52B,98C 'authent':34B,79C 'author':75C 'bodi':116C 'call':44B,105C 'contain':72C 'cve':13A,16A 'deliv':118C 'email':9A,41B,49B,90C,96C,108C 'email_template.view':85C 'host':27B 'html':115C 'improp':74C 'laradashboard':1A,22B,28B,68C 'laravel':23B 'let':32B 'mailer':67B,126C 'mcp':11A,24B,46B,93C,102C 'mint':100C 'permiss':43B,86C 'phish':59B,119C 'raw':114C 'read':3A,39B,83C 'read-on':2A,38B,82C 'recipi':111C 'self':26B 'self-host':25B 'send':7A,48B,57B,88C,95C,107C 'send-email':47B,94C,106C 'site':64B,124C 'spam':61B,121C 'subject':112C 'templat':42B 'token':103C 'tool':12A,21B,50B,97C 'use':54B 'user':5A,35B,80C 'via':10A,91C 'vulner':76C","nicknames":[],"mitigations":[],"who_affected":"Teams running LaraDashboard from 1.4.0 up to but not including 1.4.9 that have the MCP send-email tool reachable by authenticated users. Users with only read-only email template access can abuse it, so the risk depends on how many accounts exist and who holds that permission. Installations on versions 1.4.9 or later, or without the MCP server, are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aitooling","laradashboard","laravel","mcp","medium","selfhosted"],"first_public_at":"2026-11-01T19:02:26+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-120450","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120450","severity":null,"published_at":"2026-11-02T15:17:28+00:00","modified_at":"2026-11-02T15:17:28+00:00","first_seen_at":"2026-11-02T15:24:03+00:00","fetched_at":"2026-11-02T15:24:03+00:00","note":null}],"documents":[{"id":52491,"url":"https://github.com/laradashboard/laradashboard/commit/5955d725683b1e63af8c38a149211d6151465aed","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":52492,"url":"https://github.com/laradashboard/laradashboard/releases/tag/v1.4.9","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":52493,"url":"https://github.com/laradashboard/laradashboard/security/advisories/GHSA-gjfv-h634-pxpv","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-11-01T19:02:26+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"},{"id":52494,"url":"https://www.vulncheck.com/advisories/laradashboard-1.4.0-before-1.4.9-improper-authorization-via-mcp-send-email-tool","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}