https://poc.intelseclab.com/tags/mcp/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-11749-ai-engine-admin-account-creation/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-11749-ai-engine-admin-account-creation/Critical severity (CVSS 9.8) — web · CVE-2025-11749. Status: Weaponized. Affects: AI Engine plugin for WordPress (mwai). Tags: wordpress, ai-engine, mwai, mcp, rest-api, information-disclosure, privilege-escalation, admin-account-creation, python, mass-scanner.webCriticalwordpressai-enginemwaimcprest-apiinformation-disclosureprivilege-escalationadmin-account-creationpythonmass-scannerhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34227-sliver-mcp-cors-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34227-sliver-mcp-cors-bypass/High severity — web · CVE-2026-34227 (GHSA-6fpf-248c-m7wm). Status: PoC. Affects: Sliver C2 framework — MCP (Model Context Protocol) server interface. Tags: sliver, c2, mcp, cors, csrf, sse, cross-origin, data-exfiltration.webHighsliverc2mcpcorscsrfssecross-origindata-exfiltrationhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34200-nhost-mcp-cors-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34200-nhost-mcp-cors-takeover/Critical severity (CVSS 9.6) — web · CVE-2026-34200 (GHSA-6c5x-3h35-vvw2). Status: PoC. Affects: Nhost CLI local MCP server (nhost mcp start). Tags: mcp, cors, csrf, drive-by, cors-bypass, credential-theft, hasura, dns-rebinding.webCriticalmcpcorscsrfdrive-bycors-bypasscredential-thefthasuradns-rebindinghttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23744-mcpjam-inspector-htb-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23744-mcpjam-inspector-htb-rce/Critical severity — web · CVE-2026-23744. Status: PoC. Affects: MCPJam Inspector v1.4.2. Tags: mcpjam-inspector, mcp, command-injection, rce, curl, hack-the-box, reverse-shell, chained-privesc.webCriticalmcpjam-inspectormcpcommand-injectionrcecurlhack-the-boxreverse-shellchained-priveschttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23520-mcpjam-inspector-vhost-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23520-mcpjam-inspector-vhost-rce/Critical severity — web · CVE-2026-23520. Status: PoC. Affects: Arcane v1.13.0 (MCPJam Inspector component). Tags: mcp, mcpjam-inspector, arcane, command-injection, rce, host-header, vhost-routing, reverse-shell.webCriticalmcpmcpjam-inspectorarcanecommand-injectionrcehost-headervhost-routingreverse-shellhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27825-mcp-atlassian-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27825-mcp-atlassian-path-traversal/Critical severity (CVSS 9.3) — web · CVE-2026-27825 (read-side twin of GHSA-xjgw-4wvw-rgm4). Status: PoC. Affects: sooperset/mcp-atlassian MCP server. Tags: mcp, path-traversal, arbitrary-file-read, confluence, mcp-atlassian, cwe-22, unauthenticated.webCriticalmcppath-traversalarbitrary-file-readconfluencemcp-atlassiancwe-22unauthenticatedhttps://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-6130-local-mcp-exec-sandbox-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-6130-local-mcp-exec-sandbox-bypass/Medium severity — misc · CVE-2026-6130. Status: PoC. Affects: local-mcp (zero-dependency MCP server for local file operations, v1.1.1). Tags: mcp, model-context-protocol, sandbox-bypass, command-execution, exec-restriction-bypass.miscMediummcpmodel-context-protocolsandbox-bypasscommand-executionexec-restriction-bypasshttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-32247-graphiti-cypher-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-32247-graphiti-cypher-injection/High severity (CVSS 8.1) — web · CVE-2026-32247 (GHSA, getzep/graphiti). Status: PoC. Affects: graphiti-core (getzep/graphiti) — memory/graph layer used by AI agent frameworks, exposed via an MCP server. Tags: cypher-injection, neo4j, falkordb, graphiti, mcp, ai-agent, tenant-isolation-bypass, cwe-943.webHighcypher-injectionneo4jfalkordbgraphitimcpai-agenttenant-isolation-bypasscwe-943https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33980-adx-mcp-server-kql-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33980-adx-mcp-server-kql-injection/High severity (CVSS 8.8) — web · CVE-2026-33980. Status: PoC. Affects: adx-mcp-server (pab1it0/adx-mcp-server). Tags: mcp, kql-injection, azure-data-explorer, ai-agent, prompt-injection, cwe-943, data-exfiltration.webHighmcpkql-injectionazure-data-explorerai-agentprompt-injectioncwe-943data-exfiltrationhttps://poc.intelseclab.com/pocs/web/2026-07-03_flowise-mcp-env-var-case-bypass/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_flowise-mcp-env-var-case-bypass/High severity — web · None assigned as of 2026-07-03. Status: PoC. Affects: Flowise / flowise-components. Tags: flowise, mcp, model-context-protocol, windows, environment-variable, case-insensitivity, node-options, rce.webHighflowisemcpmodel-context-protocolwindowsenvironment-variablecase-insensitivitynode-optionsrcehttps://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-42271-litellm-mcp-command-injection/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-42271-litellm-mcp-command-injection/High severity (CVSS 8.7) — web · CVE-2026-42271. Status: PoC. Affects: BerriAI LiteLLM (proxy) — MCP preview/test endpoints. Tags: command-injection, LiteLLM, MCP, AI-application, ai-gateway, authenticated, api-key, subprocess.webHighcommand-injectionLiteLLMMCPAI-applicationai-gatewayauthenticatedapi-keysubprocess