CVE-2026-16326

consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode

At a glance

Severity: CRITICAL 10.0
EPSS: EPSS 0.54 % · percentile 45 (2026-10-27)
State: PUBLISHED
Published: 2026-07-29
Updated: 2026-07-29
Assigner: HashiCorp
NVD status: Deferred

Description

In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used for subsequent requests from other clients. This vulnerability (CVE-2026-16326) is fixed in consul-mcp-server 0.1.4.

Scores

Version	Score	Vector	Scored by
CVSS 3.1	CRITICAL 10.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L	HashiCorp
CVSS 3.1	CRITICAL 10.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L	NVD · security@hashicorp.com (Secondary)

Weaknesses (CWE)

CWE-488

European references

ENISA EUVD · EUVD-2026-50469
GCVE · GCVE-0-2026-16326

Affected products

Product	Versions
HashiCorp · Tooling	affected 0.1.0 < 0.1.4

References

https://discuss.hashicorp.com/t/hcsec-2026-24-multiple-vulnerabilities-impacting-hashicorp-consul-mcp-server/77612

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD