CVE-2025-59163 vet MCP Server SSE Transport DNS Rebinding Vulnerability
Remote attackers can expose vet scan database data via DNS rebinding when using the SSE transport mode.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2025-59163?
CVE-2025-59163 is a low-severity server-side request forgery vulnerability in safedep vet, published on 29 Sep 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE mode with default ports through the sqlite3 query MCP tool. This issue is fixed in version 1.12.5.
Weakness: CWE-350
Which versions are affected by CVE-2025-59163?
3 open source packages ship an affected version, including github.com/safedep/vet.
| Package | Affected | Fixed in |
|---|---|---|
github.com/safedep/vet Go | All versions | 1.12.5 |
github.com/safedep/vet Go | All versions | 1.12.5 |
github.com/safedep/vet Go | All versions | 1.12.5 |
How do I fix CVE-2025-59163?
Upgrade github.com/safedep/vet to 1.12.5 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2025-59163 being exploited?
There is no known exploitation of CVE-2025-59163 in the wild and no public exploit code.
Sources
Also known as GHSA-6q9c-m9fr-865m, GO-2025-3986.