stacklok toolhive

• CVE-2026-58197 High 8.8 ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement 0.4%
• CVE-2026-58196 Medium 4.7 ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) 0.4%
• CVE-2026-54450 Low 2.9 ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway 0.3%
• CVE-2025-47274 Low 2.4 ToolHive stores secrets in the state store with no encryption 0.1%