PoC Archive PoC Archive

tag

Cors-Bypass

Critical
Nhost Local MCP Server Unauthenticated CORS Bypass Leading to Full Project Takeover (CVE-2026-34200)
CVE-2026-34200 (GHSA-6c5x-3h35-vvw2)· Nhost CLI local MCP server (nhost mcp start) unpatched