Unauthenticated RCE in CircleCI's MCP server: Host/Origin allowlist bypassed by any non-browser client (GHSA-xv5j-cwgj-22r4) /r/netsec - Information Security News & Discussion By: /u/HyprWave 17 August 2026 at 14:14 submitted by /u/HyprWave [link] [comments]
Login