toolhive

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)CVE-2026-58196stacklok · CVSS 4.7 · 0.4% likely

   CWE-918

2. ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movementCVE-2026-58197stacklok · CVSS 8.8 · 0.4% likely

   CWE-306

3. ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gatewayCVE-2026-54450stacklok · CVSS 2.9 · 0.3% likely

   CWE-918

4. ToolHive stores secrets in the state store with no encryptionCVE-2025-47274stacklok · CVSS 2.4 · 0.1% likely

   CWE-311

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.