GenieACS
MCP server bridging GenieACS TR-069 ACS instances to LLMs for CPE device management
Update first. Issues have been reported, but none is flagged on the version the registry lists. That version can trail the package's newest release, so check you run one past the issues below.
Registry name io.github.GeiserX/genieacs-mcp
· Source code · Website
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| CVE-2026-55637genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCP_LISTEN_ADDR value 127.0.0.1:8080 when MCP_AUTH_TOKEN is unset a… | high | Not checked | Aug 25, 2026 |
Versions in the registry
0.4.1 (listed), 0.4.0, 0.3.7, 0.3.6, 0.3.5, 0.3.4, 0.0.12 (package 0.0.11), 0.0.11