All security reports
OSV security advisory

Security advisory for ROOT-APP-NPM-CVE-2026-111770

ROOT-APP-NPM-CVE-2026-111770

Full advisory details, affected packages, severity context, and original source.

Affected technology

ROOT-APP-NPM-CVE-2026-111770Affected product

Advisory overview

Root has patched CVE-2026-111770 in the @modelcontextprotocol/server package for Root:npm. Multiple fixed versions available.

Affected packages and releases

Root:npm / @modelcontextprotocol/server

introduced: 0 · fixed: 2.0.0-aikido.1 · fixed: 2.0.0-aikido.2

Root:npm / @rootio/modelcontextprotocol__server

introduced: 0 · fixed: 2.0.0-root.io.1 · fixed: 2.0.0-root.io.2

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
CVE-2026-111770 in @modelcontextprotocol/server - Patched by Root | Security report | Cevnitra