Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Contentful
Contentful-mcp-server
Contentful Contentful-mcp-server vulnerabilities
@contentful
mcp-server
,
mcp-tools
,
contentful
contentful-mcp-server
+2 more
Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint
CVE-2026-53957
Fix available
7.7
High
August 19, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open