{
 "id": "AIR-2026-1294",
 "slug": "cve-2026-55640-nextcloud-mcp-server-unauthenticated-webhook",
 "title": "CVE-2026-55640: Nextcloud MCP Server unauthenticated webhook vulnerability",
 "summary": "Nextcloud MCP Server before version 0.117.2 lacks authentication on its webhook endpoint when configured with default settings. An attacker can exploit this to send unauthenticated requests and manipulate user identifiers.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Nextcloud MCP Server"
 ],
 "incident_date": "2026-08-25",
 "incident_date_precision": "day",
 "first_reported": "2026-08-25",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55640",
   "publisher": "NVD",
   "title": "CVE-2026-55640: Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance.",
   "published_at": "2026-08-25"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-55640",
  "mcp",
  "authentication-bypass"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}