CVE-2026-117570

nmap-mcp accepts NSE categories outside its safety allowlist

Vorota-ai · nmap-mcp scan-vulnerabilities tool

First documented disclosure · Review checkpoint

Summary

Callers could select intrusive or disruptive scan scripts despite advertised category restrictions.

Severity and exploitation evidence

Medium · 4.8/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed sources describe a vulnerability and demonstration, not established malicious exploitation.

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Inputs absent from the allowed category set pass a permissive character check.

Conditions required

MCP tool access and a reachable scan target; a manipulated agent could supply the script selection.

Potential impact

Potential unintended intrusive scanning or disruption of targets; arbitrary host command execution is not established.

Affected versions and configurations

Through commit 3636afa6ad4e159c7ad07ca35ede644f37db9c5e.

Fix and mitigation status

No fixed version established in the reviewed sources.

Practical next steps

Disable the affected tool or enforce explicit approved script identifiers and categories.

Operating lesson

Syntactically acceptable inputs are not necessarily authorized operations.

Evidence and limits

October 23 issue predates October 27 assignment. The CNA rates this medium and distinguishes downstream target effects from server compromise.

Sources