What happened
Rapid7 fixed a GraphQL query injection in the Bulk Export MCP server's export-status component (published 24 Sept 2026), where an unvalidated MCP tool argument flows into a GraphQL query.
Why it matters
Precision item: MCP tool arguments flowing unsanitized into backend queries is the recurring agent-tool injection pattern; here it reaches a GraphQL data-export API.
Attack vector
The get_export_status MCP tool passes an unvalidated export_id argument into a GraphQL query (export_status in src/export_manager.py), enabling GraphQL query injection through the check_rapid7_export_status path.
Affected systems
Rapid7 Bulk Export MCP versions 0.2.5-0.6.1 (fixed 0.6.2)
Mitigation
Upgrade to rapid7-bulk-export-mcp >= 0.6.2 (release tag v0.6.2).