CVE-2026-59971 in MySQL MCP Server
Prediction
by VulDB Data Team • 09/12/2026
A vulnerability was identified in MySQL MCP Server up to 0.4.1. The affected element is the function cursor.execute of the file src/mysql_mcp_server/server.py of the component SSE Transport. The manipulation of the argument Query leads to reliance on reverse dns resolution. The attack may be initiated remotely. Upgrading to version 0.4.2 is sufficient to fix this issue. You should upgrade the affected component.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.