5.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-29787

CVE-2026-29787: mcp-memory-service: System Information Disclosure via Health Endpoint

mcp-memory-service is an open-source memory backend for multi-agent systems. Prior to version 10.21.0, the /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCP_ALLOW_ANONYMOUS_ACCESS=true is set (required for the HTTP server to function without OAuth/API key), this endpoint is accessible without authentication. Combined with the default 0.0.0.0 binding, this exposes sensitive reconnaissance data to the entire network. This issue has been patched in version 10.21.0.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-29787

CVE-2026-29787:

5.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
mcp-memory-service	pip	< 10.21.0	10.21.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the security advisory and the associated patch commit 18f4323ca92763196aa2922f691dfbeb6bd84e48 reveals an information disclosure vulnerability in the mcp-memory-service. The root cause was two FastAPI endpoints, health_check and detailed_health_check, in src/mcp_memory_service/web/api/health.py that exposed sensitive system and application data.

The detailed_health_check function was the most critical, as it returned OS version, Python version, hardware details, and the absolute file path to the application's database. This was accessible to any user with read permissions, which included anonymous users if MCP_ALLOW_ANONYMOUS_ACCESS was enabled. The patch remediated this by elevating the required permission to require_write_access (admin-level) and stripping the sensitive fields from the response, leaving only resource utilization percentages.

The health_check function was also vulnerable, leaking the application version and uptime without any authentication. The patch fixed this by removing these fields, making the endpoint return only a static "healthy" status.

Additionally, a defense-in-depth mitigation was applied in src/mcp_memory_service/config.py by changing the default HTTP host binding from 0.0.0.0 to 127.0.0.1. This prevents the service from being exposed to the network by default, reducing the attack surface for this and other potential vulnerabilities.

Vulnerable functions

detailed_health_check

src/mcp_memory_service/web/api/health.py

This function was vulnerable because it collected and exposed detailed system information (OS version, Python version, CPU count, memory/disk sizes) and the full database file path to users with only read access. When anonymous access was enabled, this allowed any unauthenticated user on the network to retrieve this sensitive data, aiding in reconnaissance and targeted attacks.

health_check

src/mcp_memory_service/web/api/health.py

This function was vulnerable because it exposed the service version and uptime to unauthenticated users without any access control. This information, while less sensitive than the detailed endpoint, still provides valuable reconnaissance data for an attacker to understand the target system.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.