meta-ads-mcp vulnerabilities

CVEs whose affected-version data names the meta-ads-mcp package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-54549High· 8.3PoC

1w ago

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the upload_ad_image tool in meta_ads_mcp/core/ads.py passes an attacker-controlled image_url to try_multiple_download_m…

▾ Midnightpipeboard-co · meta-ads-mcpEPSS 0.23%via NVD

CVE-2026-54547High· 7.4PoC

1w ago

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in meta_ads_mcp/core/http_auth_integration.py rejects HTTP MCP requests only when both auth_tok…

▾ Midnightpipeboard-co · meta-ads-mcpEPSS 0.41%via NVD

CVE-2026-48039Critical· 9.1

1mo ago

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integration.py:272` unconditionally forwards unauthenticated Streama…

▾ Midnightmeta-ads-mcp · meta-ads-mcpEPSS 0.43%via NVD