Junglewise Threat Intelligence

CVE-2026-54504: MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the

CVE-2026-54504 · Severity: high · CVSS 8.8 · Published 2026-09-17

Vendors: npm.

Executive brief

The MCP Documentation Server, a tool used to manage documentation for AI assistants, contains a security flaw where its management interface is exposed to the entire network by default without any password protection. This allows anyone on the same network (such as a corporate LAN or shared Wi-Fi) to read, search, add, or delete documents stored on the server. This could lead to the exposure of sensitive internal documentation or the tampering of information used by AI tools.

Technical details

The vulnerability is a combination of an unsafe default configuration (binding to all interfaces) and missing authentication for sensitive API endpoints. In version 1.13.0, the Express.js server is initialized using `app.listen(PORT)` without specifying a host, causing it to bind to `0.0.0.0`. Simultaneously, the `/api/documents` and `/api/search-all` endpoints do not implement any authorization checks. An attacker on the same network can perform CRUD operations on the document corpus, search through all stored data, and modify the server configuration. The issue is addressed in version 1.13.1.

Affected products

  • andrea9293 mcp-documentation-server 1.13.0

Timeline

  • 2026-06-04: disclosed: Initial advisory publication
  • 2026-07-15: advisory: Advisory updated with CVE-2026-54504
  • 2026-07-15: patched: Fix released in version 1.13.1

References