{
 "id": "AIR-2026-0121",
 "slug": "cve-2026-61559-dynamic-api-url-redirection-flaw-in-mcp-gitla",
 "title": "CVE-2026-61559: Dynamic API URL redirection flaw in mcp-gitlab",
 "summary": "The mcp-gitlab Model Context Protocol server accepts unvalidated dynamic API base URLs via request headers and attaches private tokens to outgoing requests. This allows arbitrary callers to intercept sensitive API tokens.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "agent_hijack"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "@zereight/mcp-gitlab"
 ],
 "incident_date": "2026-09-15",
 "incident_date_precision": "day",
 "first_reported": "2026-09-15",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61559",
   "publisher": "NVD",
   "title": "CVE-2026-61559: `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab.",
   "published_at": "2026-09-15"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-61559",
  "mcp",
  "credential-leak"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}