All vulnerabilities

CVE-2026-77329 · GHSA-2cwc-6wwp-62q6

Tapo MCP: DNS rebinding reaches unauthenticated smart-home controls

mediumCWE-346CWE-350

Vendor

mihai-dinculescu

Package

ghcr.io/mihai-dinculescu/tapo-mcp other

Affected

>= 0.3.1, <= 0.4.0

Disclosed

2026-07-11

Credit

Avishai Gonen

dns-rebindingmcp

Published advisory