CVE-2026-79538

n/a / n/a PUBLISHED

Description (CNA)

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (createTransport, STDIO branch, routers/mcp-proxy/server.ts).

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/metatool-ai/metamcp
https://www.traceforce.ai/security-advisories/cve-2026-79538

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.