{"items":[{"id":"NVI-00015028","kind":"vulnerability","title":"SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses","revision":1,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-hjwh-xvfw-qrwj"],"plain_summary":"GitHub lists this reviewed advisory for mcp-searxng. Published version ranges and source prerequisites are shown below; this is not an inspection of a visitor’s application.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-0bcc2e53fadd61334c7981c711ddcdff"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-08-19T19:32:47.000Z","value":"5.5 medium","meaning":"GitHub source severity; exploitability and local consequence require separate evidence.","source_id":"sr-0bcc2e53fadd61334c7981c711ddcdff"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-0bcc2e53fadd61334c7981c711ddcdff","url":"https://github.com/advisories/GHSA-hjwh-xvfw-qrwj","basis":"vendor_advisory","notes":"GitHub Advisory Database; CC-BY-4.0. Each advisory links its original attribution. Null normalizes fields.","title":"GHSA-hjwh-xvfw-qrwj","publisher":"GitHub Advisory Database","observed_at":"2026-11-02T20:14:33.912Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-0bcc2e53fadd61334c7981c711ddcdff"],"technology":"mcp-searxng","known_exclusions":[],"conditions_summary":"### Summary\n\nmcp-searxng version 1.11.0 exposes SearXNG Basic Authentication credentials embedded in the `SEARXNG_URL` environment variable.\n\nWhen the server starts in STDIO mode and an MCP client connects, the complete `SEARXNG_URL`, including its username and password, is sent to the client through an MCP `notifications/message` logging notification.\n\nAdditionally, when URL validation fails, the complete credential-bearing URL is included in the configuration error. This error is logged through MCP and returned to the client as a JSON-RPC error response.\n\nFor example, a value such as:\n\n```text\nhttp://username:password@searxng.example.com\n```\n\nis exposed without redaction.\n\nA connected MCP client or anyone with access to captured server logs may recover the SearXNG credentials and use them to access the configured SearXNG instance.\n\nThe issue was confirmed in:\n\n```text\nmcp-searxng 1.11.0\n```\n\nSuggested severity: **Medium**\n\n### Details\n\nmcp-searxng supports SearXNG Basic Authentication by embedding credentials in the URL userinfo component:\n\n```text\nhttps://username:password@searxng.example.com\n```\n\nThe project contains a redaction function named `redactSearxngInstanceUrl()`, but ","public_affected_ranges":["< 1.12.0"]}],"null_published_at":"2026-11-03T10:03:26.536Z","source_updated_at":"2026-08-19T19:32:47.000Z","source_disclosed_at":"2026-08-19T19:32:46.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"First indexed by Null; source disclosure date is shown separately.","null_first_observed_at":"2026-11-02T20:14:33.912Z"}],"next_cursor":null,"snapshot_revision":"42594"}