Threat Intelligence Database

CVE-2026-54549 is a server-side request forgery (SSRF) vulnerability in the pipeboard-co meta-ads-mcp product. The vulnerability exists in versions prior to 1.0.115 in the upload_ad_image tool, which improperly validates URLs used for image downloads. This allows an attacker to cause the server to make unauthorized HTTP requests to internal or protected network resources. The issue is fixed in version 1.0.115.

CVE-2026-54547 is an improper authentication vulnerability in pipeboard-co's meta-ads-mcp server prior to version 1.0.115. The issue arises because the AuthInjectionMiddleware only rejects requests when both auth_token and pipeboard_token are absent, but the token extraction does not treat X-Pipeboard-Token as a primary credential. This allows an attacker using the streamable-http transport to bypass authentication and cause the server to use the operator's META_ACCESS_TOKEN, enabling unauthorized access to Meta Ads data. Deployments using the default stdio transport or without META_ACCESS_TOKEN are not affected. The vulnerability is fixed in version 1.0.115.

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integration.py:272` unconditionally forwards unauthenticated Streamable HTTP requests to downstream MCP tool handlers without issuing a `401` response, allowing any network-reachable caller to invoke MCP tools without authentication. When no per-request credential is present, tool handlers fall back to the `META_ACCESS_TOKEN` environment variable, and when the downstream Meta Graph API call fails, `api.py:263–269` serialises the raw `httpx` request URL—including the operator's `access_token` as a query parameter—into the JSON-RPC response body, delivering the credential to the unauthenticated caller. Version 1.0.109 fixes the issue.