CVE-2026-123779

The Axis2 MCP catalog disclosed metadata for services marked hidden

Apache Software Foundation · Axis2/Java MCP tool catalog and service metadata

First documented disclosure · Review checkpoint

Summary

Disabling service metadata in Axis2 still allowed anonymous callers to see operation names and schema definitions.

Severity and exploitation evidence

Low · numeric CVSS score not recorded. Severity source.

Exploitation not established: The reviewed public disclosures do not report exploitation in the wild.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The framework checked the metadata setting on some discovery routes but omitted the check from others, including the MCP tool catalog.

Conditions required

An affected service has disabled metadata publication and an untrusted caller can reach an affected discovery surface.

Potential impact

A caller could discover hidden service operations and their input or output structure. The advisory identifies no unauthorized invocation.

Affected versions and configurations

Through 2.0.1.

Fix and mitigation status

2.0.2.

Practical next steps

Upgrade Axis2/Java to 2.0.2 and check that services marked hidden are absent from all enabled catalogs.

Operating lesson

Apply service publication settings to every discovery format, including agent tool catalogs.

Evidence and limits

Apache assigned a qualitative Low rating without a numeric CVSS score. The 2.0.2 release predates the November 6 public advisory and November 9 CVE record.

Sources