Vibe Coding
mcp-router Aggregator Bound to All Interfaces on a Fixed Port With Opt-In Auth (CVE-2026-81094, 9.3)
The `serve` command in `apps/cli/src/commands/serve.ts` defaulted its host to the all-interfaces address on a fixed port and required a token only when the operator passed the corresponding flag. An MCP aggregator is the highest-value target in this batch by design, since it fronts every server a developer has registered, so one unauthenticated reachable port hands over the full toolset. The Telnyx MCP server (CVE-2026-81098, 9.3) failed the same way, serving MCP on the root path bound to all interfaces while parsing auth headers in a non-failing mode.
Source
↳ Follow the thread