Vulnerability Description
pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request whatever host it named. A page in a browser could therefore point a name it controlled at the address the server was bound to and drive the locally reachable MCP server through the visitor's browser. The protection was already available in the packaged transport and simply not turned on, so updating the dependency alone would not have closed it. Version 0.5.1 passes the option explicitly.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/timescale/pg-aiguide
- https://github.com/timescale/pg-aiguide/pull/121
- https://www.vulncheck.com/advisories/timescale-pg-aiguide-through-0.5.0-dns-rebi
FAQ
What is CVE-2026-81095?
CVE-2026-81095 is a vulnerability with a CVSS score of 6.8 (MEDIUM). pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding...
How severe is CVE-2026-81095?
CVE-2026-81095 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-81095?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.