CVE-2026-57207: NetBox MCP Server: HTTP transport exposes all NetBox data without authentication
NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session and full access to all four NetBox tools - no token or credential needed. This issue has been patched in version 1.2.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
NetBox MCP Serverto a version that resolves this vulnerability.Fixed in 1.2.1
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments running NetBox MCP Server before version 1.2.1 with TRANSPORT=http are exposed. Any client able to reach the server's HTTP port can establish a valid MCP session.
Does an attacker need credentials or an existing account?
No. The affected HTTP endpoint does not require a token or other credential, and no prior authentication is needed.
What data can an unauthenticated client access?
An unauthenticated client can access all four read-only NetBox tools and thereby obtain all NetBox data available through those tools.
What should teams do if they cannot patch immediately?
Restrict network reachability to the HTTP port so that untrusted clients cannot connect. The provided data identifies version 1.2.1 as the patched release.