CVE-2026-49257
2 advisories.
PyPI/mcp-pinot-server CVE-2026-49257: critical 10
mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind
Action: Upgrade mcp-pinot-server to 3.1.0 or later.
pip install mcp-pinot-server==3.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-73cv-556c-w3g6
- https://github.com/startreedata/mcp-pinot/security/advisories/GHSA-73cv-556c-w3g6
- https://nvd.nist.gov/vuln/detail/CVE-2026-49257
- https://github.com/startreedata/mcp-pinot/issues/90
- https://github.com/startreedata/mcp-pinot/pull/95
- https://github.com/startreedata/mcp-pinot/commit/1c7d3f9cd384854bf72c127d230bdb32299475ad
- https://github.com/startreedata/mcp-pinot
CVE-2026-49257 · published · modified · JSON
PyPI/mcp-pinot-server CVE-2026-49257: critical 10
mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind
Action: Upgrade mcp-pinot-server to 3.1.0 or later.
pip install mcp-pinot-server==3.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: PYSEC-2026-410
- https://github.com/startreedata/mcp-pinot/security/advisories/GHSA-73cv-556c-w3g6
- https://nvd.nist.gov/vuln/detail/CVE-2026-49257
- https://github.com/startreedata/mcp-pinot/issues/90
- https://github.com/startreedata/mcp-pinot/pull/95
- https://github.com/startreedata/mcp-pinot/commit/1c7d3f9cd384854bf72c127d230bdb32299475ad
- https://github.com/startreedata/mcp-pinot
- https://pypi.org/project/mcp-pinot-server
- https://github.com/advisories/GHSA-73cv-556c-w3g6
CVE-2026-49257 · published · modified · JSON