What’s Vulnerable › Products

contentful-mcp-server vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your contentful-mcp-server version is affected

Latest contentful-mcp-server vulnerabilities

• CVE-2026-53957 — Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint (CVSS 7.7)