Contentful MCP Tools Vulnerability Under Investigation
- Severity
- HIGH
- Affected component
- contentful/mcp-tools (npm)
- Patched version
- Not yet available
An early warning has been issued regarding a potential vulnerability in the `@contentful/mcp-tools` npm package. The `export_space` and `import_space` tools in this package reportedly accept LLM-controlled `host` and `proxy` parameters that are passed to the Contentful Management API (CMA) SDK, which may allow an attacker to redirect CMA requests to a controlled endpoint.
What happened
The `export_space` and `import_space` tools in the `@contentful/mcp-tools` npm package are under investigation for a vulnerability. These tools appear to accept LLM-controlled `host` and `proxy` parameters that are passed to the Contentful Management API (CMA) SDK. This could potentially allow an attacker to redirect CMA requests to a controlled endpoint. The vulnerability has not been exploited in the wild as of the latest reports.
Professional software engineers using `@contentful/mcp-tools` should assess their exposure by reviewing the use of `host` and `proxy` parameters in their applications. It is recommended to upgrade to the latest version of `@contentful/mcp-tools` as soon as it becomes available. Currently, no authoritative version range has been published, so it is important to monitor the primary sources for updates.
What to do about it
- Review the use of `host` and `proxy` parameters in your application.
- Upgrade to the latest version of `@contentful/mcp-tools` as soon as it becomes available.
- Monitor the primary sources for updates on the vulnerability and any official fixes.
- No official fix has been published yet. Continue to monitor the sources below for updates.
How 0Day would have caught this
contentful/mcp-tools is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
If you are using the `@contentful/mcp-tools` npm package, you may be affected. Review your use of `host` and `proxy` parameters and consider upgrading to the latest version as soon as it becomes available.
What should I do right now?
Review the use of `host` and `proxy` parameters in your application and upgrade to the latest version of `@contentful/mcp-tools` as soon as it becomes available. Monitor the primary sources for updates on the vulnerability and any official fixes.
Is there an official fix available?
No official fix has been published yet. Continue to monitor the primary sources for updates.