CVE-2026-16326: CVE-2026-16326: güvenlik açığı

Açıklama (NVD)

In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used for subsequent requests from other clients. This vulnerability (CVE-2026-16326) is fixed in consul-mcp-server 0.1.4.

Özet bilgiler

CVSS v3.1

10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

EPSS

%0,54 (yüzdelik 45)

CWE

CWE-488

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• discuss.hashicorp.com
• CWE-488