What’s Vulnerable › Products

penpot @penpot/mcp vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your penpot @penpot/mcp version is affected

Latest penpot @penpot/mcp vulnerabilities

• CVE-2026-100868 — Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge (CVSS 6.3)