CVE-2026-62264 with a CVSS score of 7.5 is a missing authentication flaw in the HTTP transport of @sylphx/pdf-reader-mcp. When the package is run with MCP_TRANSPORT=http, it reads MCP_API_KEY and logs that API key authentication is enabled, but it does not validate the X-API-Key header on incoming requests. Because the default bind address is 0.0.0.0, any network client that can reach the service port can invoke the /mcp endpoint without credentials and use every PDF tool exposed by the server. This permits an unauthenticated remote attacker to read PDF contents accessible to the server process on the host, while URL-based sources can enable limited server-side request forgery against private or loopback addresses unless private IP access is explicitly enabled. The misleading startup log can make operators believe protection is active, increasing the likelihood of silent exposure. Business impact includes unauthorized disclosure of sensitive documents, potential access to internal resources through SSRF, loss of confidentiality, compliance exposure, and operational disruption if confidential PDFs are exposed.
We recommend you to update @sylphx/pdf-reader-mcp to version 3.0.1 or later.[/subscribe_to_unlock_form]
CVE-2026-62264 with a CVSS score of 7.5 is a missing authentication flaw in the HTTP transport of @sylphx/pdf-reader-mcp. When the package is run with MCP_TRANSPORT=http, it reads MCP_API_KEY and logs that API key authentication is enabled, but it does not validate the X-API-Key header on incoming requests. Because the default bind address is 0.0.0.0, any network client that can reach the service port can invoke the /mcp endpoint without credentials and use every PDF tool exposed by the server. This permits an unauthenticated remote attacker to read PDF contents accessible to the server process on the host, while URL-based sources can enable limited server-side request forgery against private or loopback addresses unless private IP access is explicitly enabled. The misleading startup log can make operators believe protection is active, increasing the likelihood of silent exposure. Business impact includes unauthorized disclosure of sensitive documents, potential access to internal resources through SSRF, loss of confidentiality, compliance exposure, and operational disruption if confidential PDFs are exposed.
We recommend you to update @sylphx/pdf-reader-mcp to version 3.0.1 or later.[emaillocker id="1283"]
The following reports contain further technical details:
[/emaillocker]