CVE-2025-56404: Input Validation
Published Sep 10, 2025
·Updated
An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation.
Affected Software
2 affected components
MariaDB MCP
MariaDB Model Context Protocol=0.1.0
Event History
Sep 10, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-56404?
CVE-2025-56404 is classified as a medium severity vulnerability due to the potential for unauthorized access to sensitive information.
2
How do I fix CVE-2025-56404?
To fix CVE-2025-56404, ensure proper user validation is implemented for the SSE service in MariaDB MCP.
3
What type of attack does CVE-2025-56404 enable?
CVE-2025-56404 enables attackers to gain unauthorized access to sensitive information via the SSE service.
4
Which version of MariaDB MCP is affected by CVE-2025-56404?
CVE-2025-56404 affects MariaDB MCP version 0.1.0.
5
Is there a patch available for CVE-2025-56404?
As of now, no specific patch has been released for CVE-2025-56404, so immediate remediation steps should be taken until one is available.