CVE-2026-61568 | zereight gitlab-mcp up to 2.1.29 HTTP MCP endpoint dns rebinding

September 15, 2026 Yanac

A vulnerability described as critical has been identified in zereight gitlab-mcp up to 2.1.29. This affects an unknown part of the component HTTP MCP endpoint. Such manipulation leads to reliance on reverse dns resolution.

This vulnerability is referenced as CVE-2026-61568. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More