CVE-2026-16498
Named by 3 kept items in this workspace.
Search every workspace for CVE-2026-16498. It matches the name as written, so it can find other things that share it.
The items that name it 3
Cross-tenant credential reuse in stateless mode; underlying MCP library does not assign unique session identifiers to requests in stateless HTTP mode, causing credentials supplied by one tenant to be reused for subsequent requests from other tenants. Affects deployments explicitly configured for sta
Cross-tenant credential-reuse bug in Terraform MCP Server's stateless HTTP mode; one user's Terraform token could be reused for later users' requests
The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users.
All cves in this workspace.