StackRadar

CVE-2026-111771

Medium

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
39
of 18,208 indexed, latest versions
Container images
39
deployed by those charts
Fix available
3 of 3
affected packages

MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service

Carried by container images the latest versions of 39 of 18,208 indexed charts deploy, on 39 images.

Affected packageAffected versionsFixed inImages
@modelcontextprotocol/sdknpm1.6.1, 1.9.0, 1.11.1, 1.12.0+8 more1.32.038
@modelcontextprotocol/servernpm2.0.02.3.08
@modelcontextprotocol/expressnpm2.0.02.0.21
OSV records
GHSA-rvq5-wwqv-78pq

Charts affected

39 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.431 of 1See more

n8n community-charts 1.24.43

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.687e0bab2c931
@modelcontextprotocol/sdk@1.26.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0

Open the chart page →

1,634
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
@modelcontextprotocol/sdk@1.26.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0

Open the chart page →

2,510
backstagebackstageOfficialVerified publisher2.10.21 of 1See more

backstage backstage 2.10.2

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
ghcr.io/backstage/backstage:latest68f2025a3f27
@modelcontextprotocol/sdk@1.30.0
1.32.0

Open the chart page →

1,362
penpotpenpotOfficialVerified publisher1.11.31 of 5See more

penpot penpot 1.11.3

1 of the 5 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
penpotapp/mcp:2.18.35e811e6eeb17
@modelcontextprotocol/sdk@1.30.0
1.32.0

Open the chart page →

6,129
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
@modelcontextprotocol/sdk@1.20.2
1.32.0

Open the chart page →

13,801
openclawopenclaw-helmVerified publisher1.5.401 of 2See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
@modelcontextprotocol/sdk@1.29.0
1.32.0

Open the chart page →

6,685
n8nhelmforgeVerified publisher2.1.81 of 2See more

n8n helmforge 2.1.8

1 of the 2 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
n8nio/n8n:2.44.4c72fa9f1bd9b
@modelcontextprotocol/sdk@1.31.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0

Open the chart page →

1,079
docmosthelmforgeVerified publisher1.4.41 of 4See more

docmost helmforge 1.4.4

1 of the 4 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
docmost/docmost:0.96.0b56947fcfd08
@modelcontextprotocol/sdk@1.30.0
1.32.0

Open the chart page →

4,668
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
@modelcontextprotocol/sdk@1.6.1
1.32.0

Open the chart page →

3,466
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
@modelcontextprotocol/sdk@1.27.1
1.32.0

Open the chart page →

5,618
agentareaagentareaVerified publisher0.0.281 of 17See more

agentarea agentarea 0.0.28

1 of the 17 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-base:0.1.18b80f30570ff
@modelcontextprotocol/express@2.0.0
@modelcontextprotocol/server@2.0.0
2.0.2
2.3.0

Open the chart page →

12,172
betterdb-monitorbetterdb-monitorOfficialVerified publisher0.49.01 of 1See more

betterdb-monitor betterdb-monitor 0.49.0

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
betterdb/monitor:0.49.0-no-ai97dcd2d2192f
@modelcontextprotocol/sdk@1.27.1
1.32.0

Open the chart page →

683
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
@modelcontextprotocol/sdk@1.29.0
1.32.0

Open the chart page →

9,890
n8nklicktippVerified publisher1.11.11 of 1See more

n8n klicktipp 1.11.1

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
n8nio/n8n:2.43.3d4eca183959b
@modelcontextprotocol/sdk@1.26.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0

Open the chart page →

1,634
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
@modelcontextprotocol/sdk@1.26.0
1.32.0

Open the chart page →

4,286
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
@modelcontextprotocol/sdk@1.30.0
1.32.0

Open the chart page →

37,593
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
alazidis/stornx:1.1.1602d4f7f090c
@modelcontextprotocol/sdk@1.11.1
1.32.0

Open the chart page →

16,981
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
@modelcontextprotocol/sdk@1.29.0
1.32.0

Open the chart page →

22,516
adeptia-automate-mcpadeptia-automate-mcp1.0.02 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
@modelcontextprotocol/sdk@1.26.0
1.32.0
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
@modelcontextprotocol/sdk@1.27.1
1.32.0

Open the chart page →

4,435
activepiecesadnoctemVerified publisher0.7.21 of 1See more

activepieces adnoctem 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
activepieces/activepieces:0.92.326daa5e1807f
@modelcontextprotocol/sdk@1.27.1
1.32.0

Open the chart page →

2,010
outlineadnoctemVerified publisher0.1.31 of 1See more

outline adnoctem 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
outlinewiki/outline:1.11.008ee9ffdb847
@modelcontextprotocol/sdk@1.31.0
1.32.0

Open the chart page →

1,578
mcp-for-argocdchristianhuthVerified publisher2.0.01 of 1See more

mcp-for-argocd christianhuth 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
@modelcontextprotocol/sdk@1.29.0
1.32.0

Open the chart page →

2,282
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
@modelcontextprotocol/sdk@1.12.1
1.32.0

Open the chart page →

33,197
decisionrules-ocpdecisionrules-ocpOfficialVerified publisher0.2.11 of 4See more

decisionrules-ocp decisionrules-ocp 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
decisionrules/server:latestbb3a93224b5a
@modelcontextprotocol/sdk@1.30.0
1.32.0

Open the chart page →

1,877
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
@modelcontextprotocol/sdk@1.9.0
1.32.0

Open the chart page →

3,681
ghostfoliohelmforgeVerified publisher1.1.21 of 4See more

ghostfolio helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.88.0256c524a6116
@modelcontextprotocol/sdk@1.30.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0

Open the chart page →

5,092
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
@modelcontextprotocol/sdk@1.30.0
1.32.0

Open the chart page →

3,964
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.25a6c2c449840
@modelcontextprotocol/sdk@1.30.0
1.32.0

Open the chart page →

2,574
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
nocodb/nocodb:latest27d2fd14670d
@modelcontextprotocol/sdk@1.30.0
1.32.0

Open the chart page →

352
mcp-gitlabmcp-helmVerified publisher0.3.41 of 1See more

mcp-gitlab mcp-helm 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
iwakitakuma/gitlab-mcp:2.0.7fb3e81aa6528
@modelcontextprotocol/sdk@1.13.3
1.32.0

Open the chart page →

1,284
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
@modelcontextprotocol/sdk@1.26.0
1.32.0

Open the chart page →

7,177
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
@modelcontextprotocol/sdk@1.26.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0

Open the chart page →

2,510
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
@modelcontextprotocol/sdk@1.26.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0

Open the chart page →

2,510
portalplatform-mesh-portal0.21.91 of 1See more

portal platform-mesh-portal 0.21.9

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/portal:v0.27.1070a8eb5e28da
@modelcontextprotocol/sdk@1.31.0
1.32.0

Open the chart page →

277
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
@modelcontextprotocol/sdk@1.29.0
1.32.0

Open the chart page →

9,114
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
supabase/studio:latestd878dcd9dba7
@modelcontextprotocol/sdk@1.29.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0

Open the chart page →

10,684
unleash-enterpriseunleash1.0.41 of 1See more

unleash-enterprise unleash 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
@modelcontextprotocol/sdk@1.26.0
1.32.0

Open the chart page →

2,460
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
@modelcontextprotocol/sdk@1.12.0
1.32.0

Open the chart page →

8,015
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-111771.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.491c8d793746f
@modelcontextprotocol/sdk@1.20.2
1.32.0

Open the chart page →

7,527

Container images carrying it

39 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:2.36.714c4285bc303
@modelcontextprotocol/sdk@1.26.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0
2
activepieces/activepieces:0.92.326daa5e1807f
@modelcontextprotocol/sdk@1.27.1
1.32.0
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
@modelcontextprotocol/sdk@1.26.0
1.32.0
1
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
@modelcontextprotocol/sdk@1.27.1
1.32.0
1
agentarea/agentarea-mcp-base:0.1.1:latest8b80f30570ff
@modelcontextprotocol/express@2.0.0
@modelcontextprotocol/server@2.0.0
2.0.2
2.3.0
1
alazidis/stornx:1.1.1602d4f7f090c
@modelcontextprotocol/sdk@1.11.1
1.32.0
1
betterdb/monitor:0.49.0-no-ai97dcd2d2192f
@modelcontextprotocol/sdk@1.27.1
1.32.0
1
decisionrules/server:latestbb3a93224b5a
@modelcontextprotocol/sdk@1.30.0
1.32.0
1
directus/directus:12.0.29c8470ea465c
@modelcontextprotocol/sdk@1.29.0
1.32.0
1
docmost/docmost:0.96.0b56947fcfd08
@modelcontextprotocol/sdk@1.30.0
1.32.0
1
ghostfolio/ghostfolio:3.88.0256c524a6116
@modelcontextprotocol/sdk@1.30.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0
1
helmforge/strapi-base:5.52.25a6c2c449840
@modelcontextprotocol/sdk@1.30.0
1.32.0
1
iwakitakuma/gitlab-mcp:2.0.7fb3e81aa6528
@modelcontextprotocol/sdk@1.13.3
1.32.0
1
mcp/kubernetes:latest5ffbf7f0a8aa
@modelcontextprotocol/sdk@1.26.0
1.32.0
1
n8nio/n8n:2.25.7761374d4eb84
@modelcontextprotocol/sdk@1.26.0
1.32.0
1
n8nio/n8n:2.41.687e0bab2c931
@modelcontextprotocol/sdk@1.26.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0
1
n8nio/n8n:2.44.4c72fa9f1bd9b
@modelcontextprotocol/sdk@1.31.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0
1
n8nio/n8n:2.36.8cfe2704ff858
@modelcontextprotocol/sdk@1.26.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0
1
n8nio/n8n:2.43.3d4eca183959b
@modelcontextprotocol/sdk@1.26.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0
1
n8nio/n8n:1.115.1ed16e560c40e
@modelcontextprotocol/sdk@1.12.0
1.32.0
1
nocodb/nocodb:latest27d2fd14670d
@modelcontextprotocol/sdk@1.30.0
1.32.0
1
nocodb/nocodb:0.301.5d9516f0bf546
@modelcontextprotocol/sdk@1.27.1
1.32.0
1
outlinewiki/outline:1.11.008ee9ffdb847
@modelcontextprotocol/sdk@1.31.0
1.32.0
1
penpotapp/mcp:2.18.35e811e6eeb17
@modelcontextprotocol/sdk@1.30.0
1.32.0
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
@modelcontextprotocol/sdk@1.29.0
1.32.0
1
supabase/studio:latestd878dcd9dba7
@modelcontextprotocol/sdk@1.29.0
@modelcontextprotocol/server@2.0.0
1.32.0
2.3.0
1
treskon/portrait-ui:DEV-lateste7970783bc8d
@modelcontextprotocol/sdk@1.30.0
1.32.0
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
@modelcontextprotocol/sdk@1.26.0
1.32.0
1
wazuh/wazuh-dashboard:4.14.491c8d793746f
@modelcontextprotocol/sdk@1.20.2
1.32.0
1
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
@modelcontextprotocol/sdk@1.20.2
1.32.0
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
@modelcontextprotocol/sdk@1.30.0
1.32.0
1
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
@modelcontextprotocol/sdk@1.29.0
1.32.0
1
ghcr.io/backstage/backstage:latest68f2025a3f27
@modelcontextprotocol/sdk@1.30.0
1.32.0
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
@modelcontextprotocol/sdk@1.9.0
1.32.0
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
@modelcontextprotocol/sdk@1.6.1
1.32.0
1
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
@modelcontextprotocol/sdk@1.12.1
1.32.0
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
@modelcontextprotocol/sdk@1.29.0
1.32.0
1
ghcr.io/platform-mesh/portal:v0.27.1070a8eb5e28da
@modelcontextprotocol/sdk@1.31.0
1.32.0
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
@modelcontextprotocol/sdk@1.29.0
1.32.0
1

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.