CVE-2026-55605 | arikusi deepseek-mcp-server up to 1.7.x HTTP Transport README.md createMcpExpressApp improper authorization

July 10, 2026 Yanac

A vulnerability marked as critical has been reported in arikusi deepseek-mcp-server up to 1.7.x. This vulnerability affects the function createMcpExpressApp of the file README.md of the component HTTP Transport. Performing a manipulation results in improper authorization.

This vulnerability is known as CVE-2026-55605. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More