CVE-2026-97228: Rapid7 Bulk Export MCP GraphQL query injection

Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 contain a GraphQL query injection vulnerability in the export-status component where unvalidated export_id arguments are interpolated directly into GraphQL queries. The vulnerability is limited to the operator's own authenticated API scope and is fixed in version 0.6.2.

Disclosed 25 September 2026 · Record updated 1 October 2026

Impact

GraphQL query injection allowing schema introspection and unintended query manipulation within an operator's own authenticated API scope; exposure primarily through compromised upstream MCP clients or indirect prompt injection.

Our coverage

A door mechanism accepts any key shape without checking, allowing intruders to slip additional locks open—but only rooms they already had permission to enter.

Vulnerabilities

Rapid7 patches GraphQL injection flaw in Bulk Export MCP server

A tool argument passed straight into a query string let crafted input append extra GraphQL selections, but only within the operator's own API scope.

25 Sept 2026

Sources

nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-97228