CVE-2026-16496

The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials. This vulnerability, CVE-2026-16496, is fixed in terraform-mcp-server 1.1.0.

CVSS v3 8.9 HIGH

8.9^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://discuss.hashicorp.com/t/hcsec-2026-23-multiple-vulnerabilities-impacting-hashicorp-terraform-mcp-server/77606

Configurations

No configuration.

History

23 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) El terraform-mcp-server antes de la versión 1.1.0 es vulnerable a una omisión de autorización en el modo de transporte con estado HTTP transmisible que puede permitir que un usuario que obtiene el ID de sesión MCP de otro usuario ejecute sus llamadas a herramientas utilizando las credenciales de Terraform de ese usuario. Esta vulnerabilidad, CVE-2026-16496, se corrige en terraform-mcp-server 1.1.0.

Information

Published : 2026-07-28 19:17

Updated : 2026-10-23 23:10

NVD link : CVE-2026-16496

Mitre link : CVE-2026-16496

CVE.ORG link : CVE-2026-16496

JSON object : View

Products Affected

No product.

CWE

CWE-384

Session Fixation

{"id": "CVE-2026-16496", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-16496", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-28T18:42:15.101188Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@hashicorp.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.9, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.2}]}, "affected": [{"source": "security@hashicorp.com", "affectedData": [{"repo": "https://github.com/hashicorp/terraform-mcp-server", "vendor": "HashiCorp", "product": "Tooling", "versions": [{"status": "affected", "version": "0.3.0", "lessThan": "1.1.0", "versionType": "semver"}], "platforms": ["64 bit", "32 bit", "x86", "ARM", "MacOS", "Windows", "Linux"], "defaultStatus": "unaffected"}]}], "published": "2026-07-28T19:17:31.983", "references": [{"url": "https://discuss.hashicorp.com/t/hcsec-2026-23-multiple-vulnerabilities-impacting-hashicorp-terraform-mcp-server/77606", "source": "security@hashicorp.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@hashicorp.com", "description": [{"lang": "en", "value": "CWE-384"}]}], "descriptions": [{"lang": "en", "value": "The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials. This vulnerability, CVE-2026-16496, is fixed in terraform-mcp-server 1.1.0."}, {"lang": "es", "value": "El terraform-mcp-server antes de la versi\u00f3n 1.1.0 es vulnerable a una omisi\u00f3n de autorizaci\u00f3n en el modo de transporte con estado HTTP transmisible que puede permitir que un usuario que obtiene el ID de sesi\u00f3n MCP de otro usuario ejecute sus llamadas a herramientas utilizando las credenciales de Terraform de ese usuario. Esta vulnerabilidad, CVE-2026-16496, se corrige en terraform-mcp-server 1.1.0."}], "lastModified": "2026-10-23T23:10:00.157", "sourceIdentifier": "security@hashicorp.com"}