high7.5
CVE-2025-56404
An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation.
Impact
An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mariadb | Model Context Protocol | Version 0.1.0 |