{"dataType":"CVE_RECORD","dataVersion":"1.0","cveMetadata":{"cveId":"GCVE-110-VULN-PYPI-2026-000612","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-10-27T04:10:54Z","dateUpdated":"2026-10-27T04:12:09Z","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"en","value":"aimarket-mcp 0.6.1 limits a server with no AIMARKET_MCP_KEY to the machine's own user: server._auth_ok requires a loopback peer, a loopback Host, no cross-site Origin and no forwarding header. A reverse proxy on the same host passes all four. nginx's default proxy_pass connects from 127.0.0.1, sends the upstream's own Host (127.0.0.1:port) and adds no forwarding header, so every caller of a keyless server behind it is treated as local and can call its tools, including web_fetch and market_invoke, which spends the operator's AIMARKET_API_KEY balance. The maintainer reproduced this through nginx against 0.6.2 (HTTP 200). Affects 0.6.1 and 0.6.2; 0.6.0 and earlier answered every caller (GCVE-110-PYPI-2026-018883). Fixed in 0.6.3, which on Linux also requires the caller's socket to belong to the user the server runs as, read from /proc/net/tcp. A proxy that runs as that same user, and any proxy on macOS or Windows, still looks local, so set AIMARKET_MCP_KEY behind any reverse proxy.","supportingMedia":null}],"references":[{"url":"https://pypi.org/project/aimarket-mcp/","name":"","tags":["advisory"]},{"url":"https://pypi.org/project/aimarket-mcp/0.6.3/","name":"aimarket-mcp 0.6.3","tags":["release"]}],"metrics":[{"format":"","scenarios":null,"cvssV2_0":null,"cvssV3_0":null,"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":4.8,"baseSeverity":"MEDIUM"},"cvssV4_0":null,"other":null}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Missing Authentication for Critical Function","cweId":"CWE-306","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Restriction of Communication Channel to Intended Endpoints","cweId":"CWE-923","type":"CWE"}]}],"affected":[{"vendor":"pypi","product":"aimarket-mcp","collectionURL":"https://pypi.org","packageName":"aimarket-mcp","repo":"","defaultStatus":"unaffected","versions":[{"version":"0.6.1","status":"affected","versionType":"python","lessThan":"0.6.3","lessThanOrEqual":"","changes":null},{"version":"0.6.3","status":"unaffected","versionType":"python","lessThan":"","lessThanOrEqual":"","changes":null}],"cpes":null,"modules":["aimarket_mcp.server"],"programFiles":["aimarket_mcp/server.py"],"programRoutines":[{"name":"aimarket_mcp.server._auth_ok"},{"name":"aimarket_mcp.server._peer_is_loopback"}],"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null},"adp":null}}