CVE-2026-104850 MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide which authorization server received the client's OAut...

EUVD-2026-93491

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide which authorization server received the client's OAut...

MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

Summary In affected versions, the SDK's OAuth client let the MCP server decide which authorization server received the client's OAuth credentials. Credentials were not tied to the authorization server they belong to. A malicious or compromised MCP server could name its own authorization server...

GHSA-6QXP-VCCF-F47H MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

Summary In affected versions, the SDK's OAuth client let the MCP server decide which authorization server received the client's OAuth credentials. Credentials were not tied to the authorization server they belong to. A malicious or compromised MCP server could name its own authorization server...

EUVD-2026-93469

Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can manage MCP API keys outside the intended account, enabling privilege escalation through account takeover. This issue is fixed in version...

CVE-2026-105806 Payload: Improper access control for MCP API keys

Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can manage MCP API keys outside the intended account, enabling privilege escalation through account takeover. This issue is fixed in version...

CVE-2026-105806 Payload: Improper access control for MCP API keys

Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can manage MCP API keys outside the intended account, enabling privilege escalation through account takeover. This issue is fixed in version...

CVE-2026-105806 Payload: Improper access control for MCP API keys

Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can manage MCP API keys outside the intended account, enabling privilege escalation through account takeover. This issue is fixed in version...

CVE-2026-105806

The Payload headless content management system is vulnerable in the @payloadcms/plugin-mcp component (versions 3.61.0 through 3.88.0 ). Due to improper access control , an authenticated user can manage MCP API keys outside of their intended account, which may lead to privilege escalation through ...

CVE-2026-105791

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the runshell tool in the CommandLineExecutor component of ufo/client/mcp/localservers/climcpserver.py validates only the first token of the bashcommand parameter and permits...

T-MAP

T-MAP : Red-Teaming des agents LLM avec recherche évolutionnaire sensible aux trajectoires T-MAP est un framework de recherche évolutionnaire sensible aux trajectoires pour le red-teaming d'agents LLM sur des serveurs MCP. Il génère et mute de manière itérative des invites adversariales guidées p...

DevHub-HTB-Walkthrough

DevHub – دليل HTB لينكس متوسط الجهاز: DevHub الصعوبة: Medium نظام التشغيل: Linux المواضيع: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, تصعيد صلاحيات الجذر 📌 1. الاستطلاع nmap -sC -sV devhub.htb النتيجة: المنفذ 22 SSH المنفذ 80 HTTP المنفذ 6274 MCPJam Inspector 📌 2. تعديل ملف المضيفين ec...

CVE-2026-105788

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...

CVE-2026-105789

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the executecommand tool in ufo/client/mcp/httpservers/linuxmcpserver.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output...

EUVD-2026-93421

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the presskey tool in ufo/client/mcp/httpservers/mobilemcpserver.py accepts a free-form keycode parameter and passes it to adb shell input keyevent. The adb client joins the arguments...

CVE-2026-105793 Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the presskey tool in ufo/client/mcp/httpservers/mobilemcpserver.py accepts a free-form keycode parameter and passes it to adb shell input keyevent. The adb client joins the arguments...

CVE-2026-105793 Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the presskey tool in ufo/client/mcp/httpservers/mobilemcpserver.py accepts a free-form keycode parameter and passes it to adb shell input keyevent. The adb client joins the arguments...

CVE-2026-105793

The Microsoft UFO open-source framework is vulnerable to an authenticated Android shell command injection in the press_key tool within ufo/client/mcp/http_servers/mobile_mcp_server.py prior to version 3.0.9 . The root cause is the handling of a free-form key_code parameter, which is passed to adb...

CVE-2026-105793 Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the presskey tool in ufo/client/mcp/httpservers/mobilemcpserver.py accepts a free-form keycode parameter and passes it to adb shell input keyevent. The adb client joins the arguments...

mcpshield

mcpshield Un correctif prêt à l'emploi pour la faille d'injection de commande MCP STDIO non corrigée la famille CVE-2026-30623, divulguée par OX Security en avril 2026 comme « by design » — aucun correctif SDK n'est prévu. Importez une ligne, et chaque serveur MCP stdio que votre application Pyth...