---
id: CVE-2026-54504
title: >-
  MCP Documentation Server is a local-first document management and semantic
  search server for AI coding agents
summary: >-
  MCP Documentation Server is a local-first document management and semantic
  search server for AI coding agents. From 1.13.0 until 1.13.1, the
  automatically started Web UI in src/server.ts calls startWebServer in
  src/web-server.ts with STA…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-306
  - CWE-668
vendor: andrea9293
product: mcp-documentation-server
affected:
  - 'mcp-documentation-server >= 1.13.0, < 1.13.1'
patched:
  - '@andrea9293/mcp-documentation-server 1.13.1'
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T20:16:51.120'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-54504'
references:
  - url: >-
      https://github.com/andrea9293/mcp-documentation-server/commit/37159d4e06b8ee50c3645b2496e3d3f6d32c47f9
    label: security-advisories@github.com
  - url: 'https://github.com/andrea9293/mcp-documentation-server/pull/20'
    label: security-advisories@github.com
  - url: >-
      https://github.com/andrea9293/mcp-documentation-server/releases/tag/v1.13.1
    label: security-advisories@github.com
  - url: >-
      https://github.com/andrea9293/mcp-documentation-server/security/advisories/GHSA-6f5r-5672-72j7
    label: security-advisories@github.com
  - url: >-
      https://github.com/andrea9293/mcp-documentation-server/security/advisories/GHSA-6f5r-5672-72j7
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://github.com/advisories/GHSA-6f5r-5672-72j7'
tags:
  - nvd
  - cve.org
  - exploit-available
  - ghsa
  - npm
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-17T19:09:25.352664Z'
aliases:
  - GHSA-6f5r-5672-72j7
ecosystem: npm
ingestedAt: '2026-07-15T23:47:19.014Z'
epss: 0.00669
epssPercentile: 0.50154
---

## Overview

MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI in src/server.ts calls startWebServer in src/web-server.ts with START_WEB_UI enabled by default and WEB_PORT set to 3080. startWebServer uses app.listen(PORT) without a host, which binds the unauthenticated document-management API to all interfaces rather than localhost. A network-reachable client can invoke GET /api/documents, GET /api/documents/:id, POST /api/documents, POST /api/search-all, DELETE /api/documents/:id, and GET /api/config without credentials to enumerate and read documents, search the corpus, insert or delete documents, and tamper with the MCP assistant's knowledge base. The service must be reachable from the attacker's LAN, VM network, container bridge, VPN, or another routed network, and the issue does not provide remote code execution. This issue is fixed in 1.13.1.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-54504)

Affected packages:

- `@andrea9293/mcp-documentation-server = 1.13.0`

Patched in:

- `@andrea9293/mcp-documentation-server 1.13.1`

Source: https://github.com/advisories/GHSA-6f5r-5672-72j7