NPM · AUGUST 2026 · EARLY WARNING

Contentful MCP Tools Vulnerability Under Investigation

EARLY WARNING · UNCONFIRMED. This page describes a developing threat that 0Day surfaced from early signals and has not yet independently confirmed. Details may change. Always verify against the primary sources before acting.
Severity
HIGH
Affected component
contentful/mcp-tools (npm)
Patched version
Not yet available
GHSA-2XHG-73J7-RRGX

An early warning has been issued regarding a potential vulnerability in the `@contentful/mcp-tools` npm package. The `export_space` and `import_space` tools in this package reportedly accept LLM-controlled `host` and `proxy` parameters that are passed to the Contentful Management API (CMA) SDK, which may allow an attacker to redirect CMA requests to a controlled endpoint.

What happened

The `export_space` and `import_space` tools in the `@contentful/mcp-tools` npm package are under investigation for a vulnerability. These tools appear to accept LLM-controlled `host` and `proxy` parameters that are passed to the Contentful Management API (CMA) SDK. This could potentially allow an attacker to redirect CMA requests to a controlled endpoint. The vulnerability has not been exploited in the wild as of the latest reports.

Professional software engineers using `@contentful/mcp-tools` should assess their exposure by reviewing the use of `host` and `proxy` parameters in their applications. It is recommended to upgrade to the latest version of `@contentful/mcp-tools` as soon as it becomes available. Currently, no authoritative version range has been published, so it is important to monitor the primary sources for updates.

What to do about it

How 0Day would have caught this

MATCHED TO YOUR ACTUAL DEPENDENCY GRAPH0Day matches every incoming threat signal against your GitHub organization’s full dependency graph, including transitive dependencies. If contentful/mcp-tools is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.

Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.

Frequently asked questions

Am I affected?

If you are using the `@contentful/mcp-tools` npm package, you may be affected. Review your use of `host` and `proxy` parameters and consider upgrading to the latest version as soon as it becomes available.

What should I do right now?

Review the use of `host` and `proxy` parameters in your application and upgrade to the latest version of `@contentful/mcp-tools` as soon as it becomes available. Monitor the primary sources for updates on the vulnerability and any official fixes.

Is there an official fix available?

No official fix has been published yet. Continue to monitor the primary sources for updates.

Sources

Join the 0Day waitlist →

← Back to all threats