@andrea9293/mcp-documentation-server v1.13.0 starts a Web UI/API on port 3080 that binds to all network interfaces (0.0.0.0) by default rather than localhost. The document-management API endpoints do not require any authentication, allowing unauthenticated network clients on the same LAN or container network to perform administrative actions such as enumerating, adding, reading, searching, and deleting documents. The root cause is the Express app listening on the port without specifying a host, which defaults to all interfaces. This behavior is documented and reproducible. No authorization checks are enforced on the API endpoints.

An attacker with network access to the host running the vulnerable server can fully manage documents via the exposed API without authentication. This includes reading sensitive document content, adding malicious documents, searching the document corpus, and deleting documents. The confidentiality, integrity, and availability of the document data are fully compromised. There is no indication of exploitation in the wild at this time.

No official patch or fix is currently documented. Users should disable the Web UI by setting the environment variable START_WEB_UI=false to prevent the server from starting the unauthenticated web interface. Alternatively, users should configure the server or underlying network to restrict access to localhost only or implement network-level access controls. Monitor the vendor repository or advisory channels for any forthcoming official fixes.