{
 "id": "AIR-2026-0115",
 "slug": "cve-2026-54450-toolhive-nat64-ip-validation-vulnerability",
 "title": "CVE-2026-54450: ToolHive NAT64 IP Validation Vulnerability",
 "summary": "A networking omission in ToolHive fails to classify certain IPv6 NAT64 prefixes embedding private targets as restricted. Attackers can exploit this misclassification through OAuth client ID URLs to bypass network controls.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "ToolHive"
 ],
 "incident_date": "2026-09-15",
 "incident_date_precision": "day",
 "first_reported": "2026-09-15",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54450",
   "publisher": "NVD",
   "title": "CVE-2026-54450: ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers.",
   "published_at": "2026-09-15"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-54450",
  "mcp",
  "ip-validation"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}