The vulnerability, with a CVSS score of 9.8, relates to the software’s support for Model Context Protocol (MCP) servers, which was added in late 2025 and enables communication between nginx web ...