PT-2026-110166

hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load wasm in src/wasm/oci.rs that verifies the Cosign signature of a separately resolved tag rather than the loaded manifest. Attackers controlling registry responses for the tag can serve an unsigned malicious...

Hyper-MCP race condition issue

Hyper-MCP versions 0.8.3 and earlier have a vulnerability due to a race condition. This issue arises because the loadwasm function in src/wasm/oci.rs verifies the Cosign signature of individual tags, rather than the signature of the loaded manifests. An attacker can control the registry responses...