This vulnerability (CVE-2026-9680) involves the Alibaba Cloud RDS OpenAPI MCP Server version 1.8.0, where the MCP server is improperly exposed by default. Specifically, the MCP endpoint listens on all network interfaces, enabling remote attackers to access and invoke MCP tools without authentication or restriction. This is categorized under CWE-1188, indicating initialization of a resource with an insecure default configuration. The CVSS 3.1 base score is 5.8 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, scope changed, and limited confidentiality impact. No official patch or remediation level has been published by the vendor as of the data provided.

Remote attackers can access and invoke MCP tools on the Alibaba Cloud RDS OpenAPI MCP Server due to the server listening on all network interfaces by default. This improper exposure can lead to unauthorized access to MCP functionalities, potentially compromising confidentiality. There is no indication of integrity or availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to restrict network access to the MCP server endpoint by limiting listening interfaces or applying network-level access controls to prevent unauthorized remote invocation of MCP tools.