HTTP MCP Server Vulnerability in Apache Pinot's mcp-pinot by Startree

CVE-2026-49257

What is CVE-2026-49257?

The mcp-pinot server, part of the Model Context Protocol for Apache Pinot, inadvertently exposes a significant security flaw in versions 3.0.1 and earlier. By default, it operates as an HTTP server bound to 0.0.0.0:8080 without any authentication, allowing anyone on the same network to interact with it. This configuration permits unauthorized users to execute SQL queries, modify table configurations, and create schemas, resulting in a confused-deputy scenario where server-side operations are executed with Pinot's credentials. To mitigate these risks, the issue has been addressed in version 3.1.0, which introduces necessary authentication protocols.

References