Threats affecting pkg:github/vorota-ai/nmap-mcp

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-117570Vorota-ai nmap-mcp · Permissive List of Allowed Inputs Medium4.82026-10-27CVE Database V5CVE-2026-117570 CVE-2026-117570 is a vulnerability in Vorota-ai nmap-mcp (version 0) where the scan_vulnerabilities tool improperly validates its allowlist of NSE script categories. This flaw allows callers, including MCP clients or prompt-injected agents, to bypass restrictions and run blocked script categories such as exploit, dos, brute, or intrusive against scan targets. Vulnerability	CVE Database V5	2026-10-27

Page 1 of 1