CVE-2026-48039

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.109, "AuthInjectionMiddleware.dispatch" at "httpauthintegration.py:272" unconditionally forwards unauthenticated Streamable HTTP requests to downstream MCP tool handlers without issuing ...

CVE-2026-48039: Improper Authentication

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.109, AuthInjectionMiddleware.dispatch at httpauthintegration.py:272 unconditionally forwards unauthenticated Streamable HTTP requests to downstream MCP tool handlers without issuing a 40...