Junglewise Threat Intelligence

CVE-2026-57496: PYSEC-2026-3489 - netlicensing-mcp: REST Path Traversal Bypasses Token Redaction

CVE-2026-57496 · Severity: low · CVSS 3.1 · Published 2026-07-23

Technologies: netlicensing-mcp (PyPI). Vendors: PyPI.

Executive brief

netlicensing-mcp: REST Path Traversal Bypasses Token Redaction

Affected products

PyPI netlicensing-mcp

Related threats

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs
Labs64 netlicensing-mcp path traversal in netlicensing_get_product