What happened
This local-first document management server for AI coding agents ships with its Web UI enabled by default and bound to 0.0.0.0, exposing unauthenticated document search/management functionality on the network.
Why it matters
Insecure-by-default network exposure of a documentation/semantic-search server used by coding agents could leak proprietary documentation or codebase context to any network-adjacent attacker, though the small single-author project limits overall blast radius.
Attack vector
The automatically started Web UI defaults to START_WEB_UI enabled and WEB_PORT 3080 bound to all network interfaces with no authentication, exposing the document management/semantic-search API to the network.
Affected systems
MCP Documentation Server 1.13.0 – 1.13.1
Mitigation
Upgrade to a patched version and explicitly disable or bind the Web UI to localhost only.