Vulnerability  ·  2026-07-30

GitHub MCP Server — Unauthenticated Nil-Pointer Dereference Denial of Service in completion/complete Handler

VulnerabilityMedium impactGlobalCVE-2026-47427
NVD published CVE-2026-47427 (CVSS 7.5, High) on 2026-07-28, describing an unauthenticated denial-of-service in GitHub's official MCP Server caused by a missing nil check in the completion-request handler.
GitHub's MCP Server is a widely-deployed official integration point for AI coding agents; an unauthenticated, pre-auth crash means any agent workflow depending on it can be disrupted trivially, and the crash occurring before authentication means it's exploitable by any network-reachable client with zero credentials.
The CompletionsHandler function accesses params.Ref without a nil check; an unauthenticated client sending a completion/complete request with a missing or empty ref field triggers a Go runtime panic and crashes the server before any authentication or token validation occurs.
github/github-mcp-server before 1.1.0
Upgrade to github-mcp-server 1.1.0 or later.
NVD CVE-2026-47427GitLab Advisory Database
See this in the live feed Explore related AI security and governance findings — updated every morning.
Open the feed →