CVE-2026-100868

Sažetak

Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attackers on adjacent networks can connect to the WebSocket port to impersonate the Penpot browser plugin, intercept task payloads, and return forged results to the MCP client.

Reference

https://github.com/penpot/penpot
https://github.com/penpot/penpot/blob/1d2c37e52c733f74017d90b0fd1ae2d074a5c33d/mcp/packages/server/src/PluginBridge.ts#L52
https://github.com/penpot/penpot/commit/b5274a44766d095247037be18c1d1918ac67ddeb
https://github.com/penpot/penpot/security/advisories/GHSA-22qr-rp27-j9wm
https://github.com/penpot/penpot/security/advisories/GHSA-ch2q-6x56-qg5r
https://www.vulncheck.com/advisories/penpot-before-2.18.0-unauthenticated-websocket-access-via-mcp-bridge

CVSS

Base:	6.3
Impact:	3.4
Exploitability:	2.8

Pristup

Vektor	Složenost	Autentikacija
ADJACENT_NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
LOW	LOW	LOW

CVSS vektor

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Zadnje važnije ažuriranje

27-09-2026 - 13:16

Objavljeno

27-09-2026 - 13:16