All vulnerabilities

CVE-2026-NONE · GHSA-4478-h5jv-647m

x64dbg-mcp-server: unauthenticated MCP transport gives any network client remote control of x64dbg, including RCE

criticalCVSS 10.0CWE-306

Vendor

duty1g

Package

x64dbg-mcp-server

Affected

< 1.0

Fixed in

1.0

Disclosed

2026-08-24

Credit

Avishai Gonen

auth-bypassrcemcp

Published advisory