Model Context Protocol Vulnerability in Google APIs

CVE-2026-11624

What is CVE-2026-11624?

The Model Context Protocol exhibits a security misconfiguration that could expose servers to DNS rebinding attacks. Prior to version 0.25.0, there was no mechanism for users to validate the 'Origin' header for incoming connections. With the introduction of the '--allowed-hosts' flag in version 0.25.0, users can now specify which hosts are permitted during server startup, providing a way to establish stricter access controls. Additionally, the existing '--allowed-origins' flag still allows for configurations, defaulting to '', which can further complicate security if not properly managed. When either flag is set to '', the server will issue a warning at startup alerting users to the potential vulnerabilities. Documentation has been updated to include these critical security details, emphasizing the importance of proper configuration to mitigate risks.

References