CVE-2026-16498
The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This vulnerability, CVE-2026-16498, is fixed in terraform-mcp-server 1.1.0.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 10
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
- EPSS probability
- 0.46%
- CWE
- CWE-488
- Published
- 2026-07-28
- Last modified
- 2026-07-28
Affected products
- HashiCorp Tooling
Weakness type
Related vulnerabilities
- CVE-2026-84685 — Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential Management
- CVE-2026-86492 — In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub...
- CVE-2026-18489 — IBM ContextForge Translate is affected by cross-client credential context confusion
- CVE-2026-82367 — Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic
- CVE-2026-71850 — Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
- CVE-2026-16326 — consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode
- CVE-2026-54497 — view_component: Reused Component Instances Retain Stale Render Context
- CVE-2026-14621 — FederatedAI FATE OSX Broker QueuePushReqStreamObserver.java QueuePushReqStreamObserver.initEggroll wrong session