Contentful's MCP server hands LLM-controlled tool arguments the proxy and insecure-TLS knobs alongside the management token

NVD·medium signalXBlueskyLinkedInCopy link

CVE-2026-53957 (7.7, published 2026-09-15) affects @contentful/mcp-server before 1.7.19 and @contentful/mcp-tools before 0.4.5. `export_space` and `import_space` expose `host`, `proxy`, `rawProxy` and `insecure` network options to LLM-controlled tool arguments and combine them with the server's `CONTENTFUL_MANAGEMENT_TOKEN`. Once `space_to_space_migration_handler` enables the migration tools, a direct MCP call or prompt injection through attacker-controlled Contentful content redirects Management API traffic. This is the cleanest example this week of transport configuration being a tool parameter.