CVE-2026-57496
9.6CriticalPublished 15 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on confidentiality, integrity
- Weakness
- CWE-22
Impact
Authenticated clients with low-privilege API keys can extract plaintext administrative tokens and gain full read, write, and delete control over the NetLicensing account. Attackers need network access and valid, non-administrative MCP credentials.
Root cause
The netlicensing_get_product tool interpolates unsanitized product numbers into a REST path, allowing path traversal to the token endpoint and bypassing token redaction routines.
Affected systems
NetLicensing MCP Server versions prior to 0.1.8
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Fix & remediation
Upgrade NetLicensing MCP Server to version 0.1.8. If immediate patching is not possible, disable the netlicensing_get_product tool or revoke untrusted low-privilege client access.
$ pip install --upgrade netlicensing-mcp>=0.1.8AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.8, netlicensing_get_product passes the caller-controlled product_number to src/netlicensing_mcp/tools/products.py, which interpolates it into a REST path consumed by nl_get() in src/netlicensing_mcp/client.py without path-segment validation. A traversal segment can be normalized from the intended product path to the /token endpoint, after which the response is serialized through _wrap_json instead of _wrap_json_token_read, bypassing redact_token_read() protections for APIKEY number and SHOP shopURL fields. An authenticated MCP client with a non-administrative API key can retrieve plaintext token values, and a recovered administrative token can provide broad read, write, and delete access to the NetLicensing account. This issue is fixed in version 0.1.8.