🔺Severity: None
👽 Reporter: hacker-kartel
⭐️ Reputation: 84
🛠 State: resolved
💼 Team: PortSwigger Web Security
💵 Bounty: null
🕐 Submitted: 2026-05-06
⏰ Disclosed: 2026-06-15 09:21:46
📝 Summary: A vulnerability was discovered in Burp Suite MCP Server BApp v1.2.1 where the
addAutoApproveTarget function failed to validate the hostnames passed to it. This allowed a malicious MCP client to inject a comma-separated hostname, which was then persisted as multiple independent allow-list entries. As a result, the user-approval dialog and the persistence layer disagreed on the target scope, leading to a consent bypass.📂 Report JSON File: 3717354
@hackeronereports