Timescale pg-aiguide up to 0.5.0 MCP HTTP Transport src/httpServer.ts dns rebinding

Summaryinfo

A vulnerability classified as critical has been found in Timescale pg-aiguide up to 0.5.0. Affected by this vulnerability is an unknown functionality of the file src/httpServer.ts of the component MCP HTTP Transport. Performing a manipulation results in dns rebinding. This vulnerability is reported as CVE-2026-81095. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability classified as critical has been found in Timescale pg-aiguide up to 0.5.0. This affects some unknown processing of the file src/httpServer.ts of the component MCP HTTP Transport. The manipulation with an unknown input leads to a dns rebinding vulnerability. CWE is classifying the issue as CWE-350. The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request whatever host it named. A page in a browser could therefore point a name it controlled at the address the server was bound to and drive the locally reachable MCP server through the visitor's browser. The protection was already available in the packaged transport and simply not turned on, so updating the dependency alone would not have closed it. Version 0.5.1 passes the option explicitly.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-81095 since 08/26/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1583.002 for this issue.

Upgrading to version 0.5.1 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Timescale

Name

• pg-aiguide

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5.0

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion