Executive brief
ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle
Affected products
- PyPI ha-mcp
Junglewise Threat Intelligence
CVE-2026-32111: PYSEC-2026-2507 - ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle
CVE-2026-32111 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: ha-mcp (PyPI). Vendors: PyPI.