CVE-2026-16326

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2026-07-29

Last Modified2026-07-29

Data SourcesNVD

Vulnerability Description

In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used for subsequent requests from other clients. This vulnerability (CVE-2026-16326) is fixed in consul-mcp-server 0.1.4.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://discuss.hashicorp.com/t/hcsec-2026-24-multiple-vulnerabilities-impacting-hashicorp-consul-mcp-server/77612

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相关漏洞威胁