CVE-2026-81100

Name of the Vulnerable Software and Affected Versions tiger-gh-mcp-server versions prior to the commit that implemented the fix

Description The MCP HTTP transport was started without enabling the host allow-list provided by the underlying SDK. Specifically, the httpServer.ts file called the httpServerFactory() helper without setting the DNS-rebinding-protection option. This allows the transport to accept requests regardless of the host name provided, enabling a DNS rebinding attack where a locally reachable GitHub MCP endpoint can be controlled via a visitor's browser pointing a controlled name to the bound address. DNS rebinding is a technique used to bypass the Same-Origin Policy (SOP) to interact with local services.

Recommendations Update the software to the version containing the fix that explicitly passes the DNS-rebinding-protection option and includes the necessary dependency update.