Model Context Protocol Server Vulnerability in MySQL MCP by Design Computer

CVE-2026-59971

What is CVE-2026-59971?

The MySQL MCP Server, which facilitates secure interactions with MySQL databases, has a critical vulnerability that arises when the MCP_TRANSPORT is set to 'sse'. This misconfiguration allows the SseServerTransport to be improperly constructed without necessary security settings and DNS rebinding protection. As a result, endpoints like /, /sse, and /messages/ lack authentication, exposing serious security risks. An attacker on the network may exploit these weaknesses to execute SQL commands and potentially manipulate the database contents. Moreover, if the MySQL account possesses FILE privileges, attackers could read or write server files, presenting further risks, such as code execution. Users are advised to upgrade to version 0.4.2 or later to mitigate these vulnerabilities.

References