CVE-2025-56404

Description

An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation.

PUBLISHED Reserved 2025-08-16 | Published 2025-09-10 | Updated 2025-09-10 | Assigner mitre

References

github.com/MariaDB/mcp/issues/17

github.com/August829/CVEP/issues/2

cve.org (CVE-2025-56404)

nvd.nist.gov (CVE-2025-56404)

Download JSON