What’s Vulnerable › Products

startreedata mcp-pinot vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your startreedata mcp-pinot version is affected

Latest startreedata mcp-pinot vulnerabilities

• CVE-2026-49257 — mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind (CVSS 10.0)