Skip to content

Back to the catalog

nvd.nist.govadvisory

CVE-2026-16498: The terraform-mcp-server before version 1

CVE-2026-16498 is a critical (CVSS 3.1: 10.0) exposure-of-sensitive-information flaw (CWE-488) in HashiCorp's terraform-mcp-server prior to version 1.1.0. In stateless streamable-HTTP transport mode, one user's Terraform API token could be reused to execute tool calls on behalf of a different, subsequent user, breaking tenant isolation in shared MCP server deployments. Fixed in terraform-mcp-server 1.1.0; further detail is tracked in HashiCorp's HCSEC-2026-23 advisory.

TL;DR Critical CVSS 10.0 bug in terraform-mcp-server lets one tenant's Terraform token leak into another tenant's tool calls under stateless HTTP transport, fixed in 1.1.0.
Open original ↗

Organisations named here

  • CWE-488

CVEs named here

  • CVE-2026-16498

Technologies named here

  • terraform-mcp-server
  • Model Context Protocol
  • Terraform

Related in AI Security