toolhive vulnerabilities
CVEs whose affected-version data names the toolhive package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-58196Medium· 4.7PoCToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Prior to 0.31.0, remote.Handler.Authenticate in pkg/auth/remote/handler.go invokes discovery.DetectAuthenticationFromServer…
▾ Twilightstacklok · toolhiveEPSS 0.38%via NVD
CVE-2026-54450Low· 2.9ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Prior to 0.29.1, networking.IsPrivateIP in pkg/networking/utilities.go omits the IPv6 NAT64 prefixes 64:ff9b::/96 and 64:ff…
▾ Sunlitstacklok · toolhiveEPSS 0.32%via NVD