Evidence · DiggingBeagle record
AnkiMCP: DNS rebinding reaches unauthenticated local MCP tools
Maintainer advisory and reproduction of a default localhost listener with disabled DNS-rebinding protection, affecting releases through 0.20.0 and fixed in 0.21.0.
- Source role
- primary disclosure
Evidence record
Maintainer advisory and reproduction of a default localhost listener with disabled DNS-rebinding protection, affecting releases through 0.20.0 and fixed in 0.21.0.
Claim-level citations (1)
- supportsAnkiMCP default local listener let a DNS-rebound web page call agent tools: AnkiMCP through version 0.20.0 disabled DNS-rebinding protection on a default local HTTP MCP listener and did not require a per-request secret, so a malicious website could initialize MCP and call tools through the browser.
GHSA-j9xx-59ph-wmr6, default config.py localhost listener, disabled TransportSecuritySettings, tools/call reproduction and affected versions