CVE-2025-56404

An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2025-09-10

Last modified

2025-09-10

Weaknesses

CWE-20

Affected products

• Model Context Protocol (Mariadb)

References

• https://github.com/August829/CVEP/issues/2
• https://github.com/MariaDB/mcp/issues/17