Litmus Automation Litmus-MCP-Server Unauthorized Access Vulnerability via SSE Protocol
Vulnerability
A vulnerability allowing unauthorized attackers to control the target's MCP service through the SSE protocol has been identified in Litmus Automation Litmus-MCP-Server versions through 0.0.1. The issue arises from a lack of identity verification for user access to SSE, enabling anyone to access this service.
Impact
Exploitation of this vulnerability allows for unauthorized control over the MCP service on the target system.
Reproduction
The vulnerability can be reproduced by running the Litmus-MCP-Server in a Docker container. Once the server is running, connect to it using the MCP tool. The default server binding allows for unauthorized access to the MCP service through the SSE protocol.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.