CVEvulnerability
CVE-2026-100868
5.3 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-09-27
- Last modified
- 2026-10-08
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 5.3 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Weaknesses
- CWE-1327
Description
Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attackers on adjacent networks can connect to the WebSocket port to impersonate the Penpot browser plugin, intercept task payloads, and return forged results to the MCP client.
Related
Weakness · CWE (1)
- CWE-1327 Binding to an Unrestricted IP Address weakness
References
- https://github.com/penpot/penpot github.com
- https://github.com/penpot/penpot/blob/1d2c37e52c733f74017d90b0fd1ae2d074a5c33d/mcp/packages/server/src/PluginBridge.ts#L52 github.com
- https://github.com/penpot/penpot/commit/b5274a44766d095247037be18c1d1918ac67ddeb github.com
- https://github.com/penpot/penpot/security/advisories/GHSA-22qr-rp27-j9wm github.com
- https://github.com/penpot/penpot/security/advisories/GHSA-ch2q-6x56-qg5r github.com
- https://www.vulncheck.com/advisories/penpot-before-2.18.0-unauthenticated-websocket-access-via-mcp-bridge www.vulncheck.com
- https://github.com/penpot/penpot/security/advisories/GHSA-ch2q-6x56-qg5r github.com