Stacklok Toolhive vulnerabilities
- stacklok toolhive, toolhive-studio +1 more ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement 8.8 High
- stacklok toolhive ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) 4.7 Medium
- stacklok toolhive ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway 2.9 Low
- stacklok toolhive ToolHive stores secrets in the state store with no encryption 2.4 Low