Vulnerability GO-2026-6526
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 hours ago
September 28, 2026 at 04:43 PM UTC
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive
v0.0.1 - v0.30.0
v0.0.1 - v0.30.0
Summary
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive
Details
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
10 days ago
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement
v0.0.1 - v0.30.0 GHSA-qg2g-g9w3-m5h8
v0.0.1 - v0.30.0 GHSA-qg2g-g9w3-m5h8
Unknown
2 months ago
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive
v0.0.1 - v0.29.0 GO-2026-5996
v0.0.1 - v0.29.0 GO-2026-5996
Unknown
2 months ago
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive
v0.0.1 - v0.30.1 GO-2026-6002
v0.0.1 - v0.30.1 GO-2026-6002
Medium Risk
2 months ago
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)
v0.0.1 - v0.30.1 GHSA-pr64-jmmf-jp54
v0.0.1 - v0.30.1 GHSA-pr64-jmmf-jp54
Low Risk
2 months ago
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway
v0.0.1 - v0.29.0 GHSA-pph6-vfjv-vpjw
v0.0.1 - v0.29.0 GHSA-pph6-vfjv-vpjw
Impacted packages
Timeline
Published
3 hours ago
September 28, 2026 at 04:43 PM UTC
Last Modified
2 hours ago
September 28, 2026 at 05:00 PM UTC