Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-49257
PUBLISHED
More InfoOfficial Page
Assigner-GitHub_M
Assigner Org ID-a0819718-46f1-4df5-94e2-005712e83aaa
View Known Exploited Vulnerability (KEV) details
Published At-18 Jun, 2026 | 21:01
Updated At-22 Jun, 2026 | 18:08
Rejected At-
▼CVE Numbering Authority (CNA)
mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind

mcp-pinot is a Python-based Model Context Protocol (MCP) server for interacting with Apache Pinot. In versions 3.0.1 and below, mcp-pinot defaults to running an HTTP MCP server bound to 0.0.0.0:8080 with no authentication enabled. All MCP tools, including SQL query execution, schema creation, and table-config mutation, are reachable by any network-adjacent caller. The server proxies these calls using server-side Pinot credentials, producing a confused-deputy condition that yields full read/write access to the configured Pinot cluster. This issue has been fixed in version 3.1.0

Affected Products
Vendor
startreedata
Product
mcp-pinot
Versions
Affected
  • < 3.1.0
Problem Types
TypeCWE IDDescription
CWECWE-306CWE-306: Missing Authentication for Critical Function
Type: CWE
CWE ID: CWE-306
Description: CWE-306: Missing Authentication for Critical Function
Metrics
VersionBase scoreBase severityVector
3.110.0CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Version: 3.1
Base score: 10.0
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/startreedata/mcp-pinot/security/advisories/GHSA-73cv-556c-w3g6
x_refsource_CONFIRM
https://github.com/startreedata/mcp-pinot/issues/90
x_refsource_MISC
https://github.com/startreedata/mcp-pinot/pull/95
x_refsource_MISC
https://github.com/startreedata/mcp-pinot/commit/1c7d3f9cd384854bf72c127d230bdb32299475ad
x_refsource_MISC
Hyperlink: https://github.com/startreedata/mcp-pinot/security/advisories/GHSA-73cv-556c-w3g6
Resource:
x_refsource_CONFIRM
Hyperlink: https://github.com/startreedata/mcp-pinot/issues/90
Resource:
x_refsource_MISC
Hyperlink: https://github.com/startreedata/mcp-pinot/pull/95
Resource:
x_refsource_MISC
Hyperlink: https://github.com/startreedata/mcp-pinot/commit/1c7d3f9cd384854bf72c127d230bdb32299475ad
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/startreedata/mcp-pinot/security/advisories/GHSA-73cv-556c-w3g6
exploit
Hyperlink: https://github.com/startreedata/mcp-pinot/security/advisories/GHSA-73cv-556c-w3g6
Resource:
exploit
Details not found