stacklok/toolhive Security Advisories | GitStock

high2026-09-18

ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement

GHSA-qg2g-g9w3-m5h8 · CVE-2026-58197

low2026-07-15

ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)

GHSA-pr64-jmmf-jp54 · CVE-2026-58196

low2026-07-15

ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway

GHSA-pph6-vfjv-vpjw · CVE-2026-54450