Network Vulnerability in ToolHive Utility from Stacklok Could Compromise Server Security

CVE-2026-58197

What is CVE-2026-58197?

The ToolHive utility, designed for managing Model Context Protocol (MCP) servers, exhibits a significant security vulnerability. Earlier versions of ToolHive CLI and ToolHive Studio do not implement adequate network isolation for locally operated MCP server containers, allowing malicious entities to access critical host services via the Docker gateway. This flaw permits unauthorized interaction with ToolHive-managed MCP proxies and the control plane. Additionally, ToolHive Studio incorrectly disables secure isolation defaults, further exposing the system. These vulnerabilities have been rectified in the releases of ToolHive CLI 0.30.1 and ToolHive Studio 0.38.0, reinforcing security and network permissions.

References