CVE-2026-61560 Details.
GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access
Atlas does not check this one. Needs requests that change data.
To test for this one, the check would have to send requests that could change data on the site. Atlas only ever reads public pages, so it does not run this check.
About CVE-2026-61560. What It Means.
The @zereight/mcp-gitlab GitLab MCP server exposes its SSE transport endpoints without any authentication when SSE mode is enabled. An unauthenticated attacker with network access can establish an MCP session and invoke every registered tool, including upload_markdown, which reads arbitrary files from the server filesystem via an unsanitized file_path parameter.
Affected Product. What Is Hit.
- Vendor
- zereight
- Product
- Zereight GitLab MCP
FAQ
Common Questions.
GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access. The @zereight/mcp-gitlab GitLab MCP server exposes its SSE transport endpoints without any authentication when SSE mode is enabled. An unauthenticated attacker with network access can establish an MCP session and invoke every registered tool, including upload_markdown, which reads arbitrary files from the server filesystem via an unsanitized file_path parameter.
No. To test for this one, the check would have to send requests that could change data on the site. Atlas only ever reads public pages, so it does not run this check. The facts about CVE-2026-61560 are on this page, and you can request a demo to see how Brandefense watches your whole external attack surface.
CVE-2026-61560 is not on the CISA Known Exploited Vulnerabilities list at the time of writing, but it is still worth fixing.
Update Zereight GitLab MCP to the latest version from the vendor, or follow the vendor's advice to switch off the affected feature. Vendor links are listed on this page when they are known.
This page lists the public facts about CVE-2026-61560. Atlas does not run a check for it, so nothing here says whether a particular site is affected.