CVE-2026-77339
Severity not reportedProcess Compose is a scheduler and orchestrator for non-containerized applications.
Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, validating the Origin header, or authenticating the caller. When MCP SSE is enabled, a malicious website can use DNS rebinding to reach the loopback listener and issue MCP requests. If expose_control_tools is enabled, the attacker can enumerate process state, read or search logs, truncate logs, and start, stop, restart, or scale local processes; configured user-defined tools can expose additional commands and output. The Gin REST API token middleware does not protect this separately started MCP listener. This issue is fixed in version 1.120.0.
Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/F1bonacc1/process-compose/commit/6ffa74f462cd2fa4f8dc1ee63c70b793b298c8... security-advisories@github.com
- https://github.com/F1bonacc1/process-compose/releases/tag/v1.120.0 security-advisories@github.com
- https://github.com/F1bonacc1/process-compose/security/advisories/GHSA-5gm3-9crp-6g3v security-advisories@github.com
- https://github.com/F1bonacc1/process-compose/security/advisories/GHSA-5gm3-9crp-6g3v 134c704f-9b21-4f2e-91b3-4a467353bcc0