Description
Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attackers on adjacent networks can connect to the WebSocket port to impersonate the Penpot browser plugin, intercept task payloads, and return forged results to the MCP client.
Published: 2026-09-27
Score: 5.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 27 Sep 2026 13:15:00 +0000

Type Values Removed Values Added
Description Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attackers on adjacent networks can connect to the WebSocket port to impersonate the Penpot browser plugin, intercept task payloads, and return forged results to the MCP client.
Title Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge
First Time appeared Kaleidos
Kaleidos penpot
Weaknesses CWE-1327
CPEs cpe:2.3:a:kaleidos:penpot:*:*:*:*:*:*:*:*
Vendors & Products Kaleidos
Kaleidos penpot
References
Metrics cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N'}

Subscriptions

Kaleidos Penpot
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-27T13:09:53.387Z

Reserved: 2026-09-27T00:20:54.407Z

Link: CVE-2026-100868

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-27T13:16:37.960

Modified: 2026-09-27T13:16:37.960

Link: CVE-2026-100868

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-1327

    Binding to an Unrestricted IP Address