Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
arcade-mcp-server
arcade-mcp-server vulnerabilities (PyPI)
1 vulnerability.
arcade-mcp-server
PyPI
Arcade MCP Default Hardcoded Worker Secret Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints
CVE-2025-66454
Fix available
6.5
Medium
December 2, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open