Model-Context-Protocol — PoC Archivehttps://poc.intelseclab.com/tags/model-context-protocol/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000local-mcp exec Tool Sandbox/Restriction Bypass (CVE-2026-6130)https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-6130-local-mcp-exec-sandbox-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-6130-local-mcp-exec-sandbox-bypass/Medium severity — misc · CVE-2026-6130. Status: PoC. Affects: local-mcp (zero-dependency MCP server for local file operations, v1.1.1). Tags: mcp, model-context-protocol, sandbox-bypass, command-execution, exec-restriction-bypass.miscMediummcpmodel-context-protocolsandbox-bypasscommand-executionexec-restriction-bypassFlowise Custom MCP Environment Variable Case Bypasshttps://poc.intelseclab.com/pocs/web/2026-07-03_flowise-mcp-env-var-case-bypass/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_flowise-mcp-env-var-case-bypass/High severity — web · None assigned as of 2026-07-03. Status: PoC. Affects: Flowise / flowise-components. Tags: flowise, mcp, model-context-protocol, windows, environment-variable, case-insensitivity, node-options, rce.webHighflowisemcpmodel-context-protocolwindowsenvironment-variablecase-insensitivitynode-optionsrce