https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T06:44:38.034910+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-329021 EUVD-2026-329021 2026-10-10T06:44:38.037156+00:00 EUVD-2026-329021 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49357 fkie_cve-2026-49357 2026-10-10T06:44:38.037191+00:00

Line Desktop MCP is a project that, while unaffiliated with the official line-bot-mcp-server, allows users to directly operate the LINE Desktop application on Windows or Mac via MCP. `line-desktop-mcp` supports a `--http-mode` Streamable HTTP transport for use with clients such as n8n. In this mode the server binds to `0.0.0.0` and exposes the MCP `/mcp` endpoint without an MCP-layer authentication check. Prior to version 1.1.2, any network client that can reach the port can initialize a session, list tools, and call tools that read LINE Desktop chat history or send LINE messages through the already logged-in desktop application. Version 1.1.2 fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-4hf8-5mjm-rfgq GHSA-4hf8-5mjm-rfgq — Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authentication 2026-10-10T06:44:38.037227+00:00

Affected: npm: line-desktop-mcp

# Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authentication

## Summary

`line-desktop-mcp` supports a `--http-mode` Streamable HTTP transport for use with clients such as n8n. In this mode the server binds to `0.0.0.0` and exposes the MCP `/mcp` endpoint without an MCP-layer authentication check. Any network client that can reach the port can initialize a session, list tools, and call tools that read LINE Desktop chat history or send LINE messages through the already logged-in desktop application.

This is High for deployments where the HTTP port is reachable beyond the local host, because the server acts with the user authority of the logged-in LINE Desktop session. It is lower if the listener is strictly firewalled to trusted local clients.

## Affected version

Repository: `dtwang/line-desktop-mcp`

Current source checked: `fbed0d2d3048e63f48a356a1267ed8ec5e78f3ae` on `main`, committed 2026-05-14.

Published npm package checked: `line-desktop-mcp@1.1.1`.

## Source evidence

`README.md` documents Streamable HTTP mode:

```text npx line-desktop-mcp@latest --http-mode --port 3000 ```

The same README documents MCP endpoints at `/mcp` and explains that this mode is intended for clients such as n8n.

`src/server.js` registers LINE Desktop tools including:

- `get_line_chatroom_history_default` - `get_line_chatroom_history_long` - `get_line_chatroom_history_short` - `send_message_manual` - `send_message_auto`

Those tool handlers call into the deskt…