CVE-2025-56404

Published September 10th, 2025

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation.

August829/CVEP

GitHub

MariaDB/mcp

MariaDB MCP (Model Context Protocol) server implementation

GitHub

168