What happened
NVD published CVE-2026-9680 (CVSS 5.8, Medium) on 2026-07-28, describing improper default network exposure of Alibaba Cloud's official RDS OpenAPI MCP server.
Why it matters
This is a classic insecure-default vulnerability in an official cloud-vendor MCP server for database administration tooling; because MCP servers are frequently deployed in shared or multi-tenant cloud environments, a default all-interfaces bind turns what should be a local-only agent tool into a network-exposed unauthenticated RDS control plane.
Attack vector
The MCP server binds to 0.0.0.0 by default rather than localhost, so any attacker with network access to the host (e.g., in a shared cloud VPC or misconfigured firewall) can directly invoke exposed RDS database management tools without authentication.
Affected systems
aliyun/alibabacloud-rds-openapi-mcp-server (all versions, default configuration)
Mitigation
No official patch confirmed as of disclosure; operators should explicitly bind the MCP server to localhost/127.0.0.1 or place it behind an authenticating reverse proxy and restrict network access via security groups/firewall rules.