Vibe Coding
HashiCorp's Terraform MCP Server Patches a CVSS 10.0 Cross-Tenant Credential-Reuse Bug
Three related flaws in the Terraform MCP server's Streamable HTTP transport were disclosed July 28 and fully fixed in 1.2.0 on August 4: CVE-2026-16498 (CVSS 10.0) cross-tenant credential reuse in stateless HTTP mode, CVE-2026-16496 (8.9) where the cache used the MCP session ID as its sole lookup key so anyone holding another user's session ID could run tool calls as them, and CVE-2026-14869 (8.6) SSRF. The session-ID-as-cache-key bug is the instructive one — it is exactly the mistake the new stateless spec's per-request identity model is designed to prevent. If you run Terraform MCP in shared HTTP mode, 1.2.0 is not optional.
↳ Follow the thread