What happened
NVD/GHSA disclosed this CVSS 8.8 High vulnerability on Sept 17, 2026: a default-insecure network binding on a locally-intended documentation server for AI coding agents.
Why it matters
This is a narrow-footprint developer-tooling issue (single-author npm package for local AI-coding-agent document indexing), but it is a repeat instance of the same default-insecure-binding class already seen across multiple MCP servers this month, worth tracking as evidence of a systemic pattern in the MCP ecosystem.
Attack vector
The automatically-started Web UI listens on port 3080 across all network interfaces (0.0.0.0) rather than localhost by default, exposing document listing, search, read, add, and delete API endpoints to any client on the same network without credentials.
Affected systems
@andrea9293/mcp-documentation-server 1.13.0 - 1.13.1
Mitigation
Upgrade beyond 1.13.1; explicitly bind the Web UI to localhost or disable START_WEB_UI in production/shared-network environments.