CVE-2026-81099: Timescale tiger-slack DNS Rebinding via Disabled Host Header Allow-List

Published Aug 27, 2026
·
Updated

tiger-slack started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. mcp/src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request whatever host it named, and a page in a browser could point a name it controlled at the address the server was bound to and drive the locally reachable Slack MCP server through the visitor's browser. The fix passes the option explicitly alongside a dependency update; the update alone would not have closed it. The repository publishes no release that brackets the fix, so the affected boundary is the commit preceding it.

Affected Software

1 affected component
tiger-slack

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Configuration

    Enable the underlying SDK DNS-rebinding-protection option (host allow-list) for tiger-slack’s MCP HTTP transport so the server enforces an allowed Host header instead of accepting requests for any host.

    tiger-slack (Slack MCP HTTP transport) DNS-rebinding-protection / disabled host header allow-list option = enabled

Event History

Aug 27, 2026
CVE Published
via MITRE·02:50 PM
Data Sourced
via MITRE·02:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:20 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

Who is realistically exposed to this issue?

Users running the tiger-slack MCP HTTP transport on an address reachable from their browser are exposed. A malicious web page can exploit DNS rebinding to send requests to the locally reachable Slack MCP server.

2

What does an attacker need to exploit it?

The attacker needs to lure a user to a page in a browser and control a hostname that can be rebound to the address where the MCP server is listening. No attacker privileges are required, but user interaction is required.

3

Does updating the underlying SDK alone fix the problem?

No. The fix requires tiger-slack to explicitly enable the SDK's DNS-rebinding-protection host allow-list option; the dependency update by itself does not close the issue.

4

How can I determine whether my deployment is affected?

Review mcp/src/httpServer.ts and the call to the shared httpServerFactory helper. The deployment is affected if the MCP HTTP transport is started without explicitly setting the DNS-rebinding-protection option that enables the host allow-list.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203