CVE-2026-55605

Name of the Vulnerable Software and Affected Versions @arikusi/deepseek-mcp-server versions 1.4.2 through 1.7.x

Description The self-hosted HTTP transport of the server exposes the POST /mcp endpoint without authentication. This occurs because the createMcpExpressApp function is called without an authProvider and lacks middleware guards. Consequently, any network-reachable client can send an unauthenticated initialize request to obtain a valid MCP session identifier. This allows unauthorized users to enumerate tools and invoke the deepseek sessions tool. Additionally, the deepseek chat tool is exposed, which utilizes the server-side DEEPSEEK API KEY if configured. This issue specifically affects self-hosted HTTP mode, which is enabled by default in container assets on port 3000.

Recommendations Update to version 1.8.0.