[ CVE-2026-104402 · Published 4 Oct 2026 ]

Vulnerability in farvisun Mindio Magic MCP

CVSS 4.3 EPSS <1%No fix listed yet

[ Description ]Official description

Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Retrieve Embedded Sensitive Data.This issue affects Mindio Magic MCP: from n/a through 0.5.6.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.