NetBox Labs vulnerabilities and threats

NetBox MCP Server versions prior to 1.2.1, when configured to use HTTP transport, lack authentication on the HTTP endpoint. This allows any client with network access to the server port to establish a valid MCP session and gain full read-only access to all four NetBox tools without requiring tokens or credentials. The issue has been addressed in version 1.2.1.

NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any REST API endpoint. Attackers can exploit the unrestricted queryset used by WritableNestedSerializer to perform boolean-based blind data extraction of sensitive field values and bypass object-level permissions across all application modules including dcim, ipam, tenancy, virtualization, circuits, and extras.