CVE-2026-9680 - Vulnerability Details - OpenCVE

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0024.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Alibaba	Alibaba Cloud Rds Openapi Mcp Server

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Alibaba	Alibaba Cloud Rds Openapi Mcp Server

References

Link	Providers
https://github.com/aliyun/alibabacloud-rds-openapi-mcp-server

History

Tue, 28 Jul 2026 21:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Alibaba Alibaba alibaba Cloud Rds Openapi Mcp Server
Vendors & Products		Alibaba Alibaba alibaba Cloud Rds Openapi Mcp Server

Tue, 28 Jul 2026 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 28 Jul 2026 09:30:00 +0000

Type	Values Removed	Values Added
Description		Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.
Title		MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server
Weaknesses		CWE-1188
References		https://github.com/aliyun/alibabacloud-rds-openapi-mcp-server
Metrics		cvssV3_1 `{'score': 5.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: alibaba

Published: 2026-07-28T09:05:30.652Z

Updated: 2026-07-28T16:08:06.668Z

Reserved: 2026-05-27T09:18:25.851Z

Link: CVE-2026-9680

Vulnrichment

Updated: 2026-07-28T16:08:03.672Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-07-28T20:35:13Z

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-9680", "assignerOrgId": "0cc2b86d-1d45-434d-ae74-11d09ec61ae8", "state": "PUBLISHED", "assignerShortName": "alibaba", "dateReserved": "2026-05-27T09:18:25.851Z", "datePublished": "2026-07-28T09:05:30.652Z", "dateUpdated": "2026-07-28T16:08:06.668Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "0cc2b86d-1d45-434d-ae74-11d09ec61ae8", "shortName": "alibaba", "dateUpdated": "2026-07-28T09:05:30.652Z"}, "title": "MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-1188", "description": "CWE-1188 Initialization of a resource with an insecure default", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-1", "descriptions": [{"lang": "en", "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}], "affected": [{"vendor": "Alibaba", "product": "Alibaba Cloud RDS OpenAPI MCP Server", "versions": [{"status": "affected", "version": "1.8.0", "lessThanOrEqual": "3.1.2", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.</p>"}]}], "references": [{"url": "https://github.com/aliyun/alibabacloud-rds-openapi-mcp-server"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-28T16:07:57.564922Z", "id": "CVE-2026-9680", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-28T16:08:06.668Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-9680", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-28T16:07:57.564922Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-28T16:08:03.672Z"}}], "cna": {"title": "MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-1", "descriptions": [{"lang": "en", "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Alibaba", "product": "Alibaba Cloud RDS OpenAPI MCP Server", "versions": [{"status": "affected", "version": "1.8.0", "versionType": "custom", "lessThanOrEqual": "3.1.2"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/aliyun/alibabacloud-rds-openapi-mcp-server"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.", "supportingMedia": [{"type": "text/html", "value": "<p>Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1188", "description": "CWE-1188 Initialization of a resource with an insecure default"}]}], "providerMetadata": {"orgId": "0cc2b86d-1d45-434d-ae74-11d09ec61ae8", "shortName": "alibaba", "dateUpdated": "2026-07-28T09:05:30.652Z"}}}, "cveMetadata": {"cveId": "CVE-2026-9680", "state": "PUBLISHED", "dateUpdated": "2026-07-28T16:08:06.668Z", "dateReserved": "2026-05-27T09:18:25.851Z", "assignerOrgId": "0cc2b86d-1d45-434d-ae74-11d09ec61ae8", "datePublished": "2026-07-28T09:05:30.652Z", "assignerShortName": "alibaba"}, "dataVersion": "5.2"}