{
 "id": "AIR-2026-0118",
 "slug": "cve-2026-61560-authentication-bypass-and-arbitrary-file-read",
 "title": "CVE-2026-61560: Authentication bypass and arbitrary file read in mcp-gitlab",
 "summary": "The mcp-gitlab Model Context Protocol server exposes unauthenticated tools in default Docker configurations and permits arbitrary file reading. This allows unauthenticated attackers to steal sensitive environment tokens and achieve account takeover.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "agent_hijack"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "@zereight/mcp-gitlab"
 ],
 "incident_date": "2026-09-15",
 "incident_date_precision": "day",
 "first_reported": "2026-09-15",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61560",
   "publisher": "NVD",
   "title": "CVE-2026-61560: `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab.",
   "published_at": "2026-09-15"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-61560",
  "mcp",
  "token-theft"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}