mysql-mcp-server vulnerabilities

MySQL MCP Server prior to 0.4.2, when MCP_TRANSPORT=sse is set, constructs SseServerTransport without security settings or DNS rebinding protection, while the /, /sse, and /messages/ routes have no authentication and the service binds to 0.0.0.0 by default. A network attacker can directly reach execute_sql or use DNS rebinding to gain unauthorized access to the database. The issue is fixed in 0.4.2.

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline comments that the regex engine does not treat as whitespace. To remediate this issue, users should upgrade to version 1.0.23.

A SQL injection vulnerability was detected in designcomputer mysql-mcp-server up to version 0.2.2 in the read_resource function of src/mysql_mcp_server/server.py in the mysql URI Handler component via manipulation of the uri_str argument. The attack can be carried out remotely, and the exploit has been publicly disclosed. The issue is fixed in version 0.3.0.