CVE-2026-117570 Details
Description
Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script, running intrusive, brute-force, exploit, or denial-of-service scripts against scan targets.
A vulnerability exists in Vorota AI's nmap-mcp tool, specifically in the scan_vulnerabilities function, prior to commit 3636afa. This vulnerability allows for improper validation of allowlisted categories, enabling the execution of blocked Nmap Scripting Engine (NSE) scripts. MCP clients or agents that have been prompt-injected can manipulate script category inputs to bypass restrictions and run potentially harmful scripts, such as those that exploit vulnerabilities or cause denial-of-service, against targeted systems.
Users can manually validate and sanitize script category inputs before sending them to the nmap-mcp server. Additionally, the server's validation logic can be improved to explicitly reject unsafe categories.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 27, 2026CISA-ADP
Assessed Nov 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Vorota-ai/nmap-mcp/issues/3 | CISA-ADP | ExploitIssue TrackingTechnical AnalysisVendor |
| https://github.com/Vorota-ai/nmap-mcp | [email protected] | Source CodeVendor |
| https://github.com/Vorota-ai/nmap-mcp/blob/3636afa6ad4e159c7ad07ca35ede644f37db9c5e/nmap_mcp/server.py#L440-L446 | [email protected] | Source CodeVendor |
| https://github.com/Vorota-ai/nmap-mcp/issues/3 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
| https://www.vulncheck.com/advisories/nmap-mcp-through-commit-3636afa-permissive-nse-script-allowlist-in-scan-vulnerabilities | [email protected] | AdvisoryVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-183 | Permissive List of Allowed Inputs | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Vorota-ai nmap-mcp | <= 3636afa6ad4e159c7ad07ca35ede644f37db9c5e |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 2, 2026 | CVE Modified | CISA-ADP |
| Oct 27, 2026 | New CVE Received | [email protected] |