CVE-2026-81102 Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation

Low 2.3 Published 27 Aug 2026 Updated 29 Aug 2026

An attacker can use DNS rebinding to access the local Dropbox Dash MCP server and invoke tools via a victim's browser.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2026-81102?

CVE-2026-81102 is a low-severity server-side request forgery vulnerability in dropbox mcp-server-dash, published on 27 Aug 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcp_server_dash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback address still reached the listener while carrying the attacker's host name. A page in a visitor's browser could therefore drive the local server and invoke its company-search and file-detail tools under the Dropbox credential the server holds. Only the network mode was reachable this way; the standard input mode was not. The fix supplies transport-security settings that enable host checking and allow only the loopback name and port, rejecting other hosts before a tool runs. The repository publishes no versions, so the affected boundary is the commit preceding the fix.

Weakness: CWE-346

Which versions are affected by CVE-2026-81102?

How do I fix CVE-2026-81102?

No fix has been published for CVE-2026-81102 yet. Limit exposure of the affected software until one is available.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2026-81102 being exploited?

There is no known exploitation of CVE-2026-81102 in the wild and no public exploit code.

Sources

Also known as GHSA-37q3-f6jc-625w.