The x64dbg-MCP Server plugin for x64dbg exposes debugger operations to unauthenticated network clients. Prior to version 1.1, the plugin listens on 0.0.0.0 by default and allows execution of arbitrary x64dbg commands, process attachment, memory read and write, and file writing to arbitrary paths. This issue is critical because it allows unauthenticated access to sensitive debugger operations, potentially [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-09T17:42:45.100Z and has not been modified since then. The x64dbg-MCP Server is vulnerable to a pre-authentication denial of service through a Content-Length integer overflow. An unauthenticated network client can supply a near-maximum Content-Length value to trigger a runtime integer-overflow panic [truncated]
