PT-2026-50795 · Startreedata · Mcp-Pinot

Published 2026-06-18 · Updated 2026-06-18 · CVE-2026-49257

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mcp-pinot versions prior to 3.1.0

Description mcp-pinot is a Python-based Model Context Protocol (MCP) server for interacting with Apache Pinot. The software defaults to running an HTTP MCP server bound to 0.0.0.0:8080 without authentication. This allows any network-adjacent caller to access all MCP tools, including SQL query execution, schema creation, and table-config mutation. The server proxies these requests using server-side Pinot credentials, creating a confused-deputy condition—where a privileged entity is tricked into performing actions on behalf of an unauthorized user—resulting in full read and write access to the configured Pinot cluster.

Recommendations Update to version 3.1.0.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-49257

Affected Products

Mcp-Pinot

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-49257 · Security Note
• https://github.com/startreedata/mcp-pinot/issues/90 · Note
• https://github.com/startreedata/mcp-pinot/commit/1c7d3f9cd384854bf72c127d230bdb32299475ad · Note
• https://github.com/startreedata/mcp-pinot/security/advisories/GHSA-73cv-556c-w3g6 · Note
• https://github.com/startreedata/mcp-pinot/pull/95 · Note
• https://twitter.com/VulmonFeeds/status/2067729883208315384 · Twitter Post