Pattern: MCP CVEs shifted this week from path traversal to authorization and approval bypass

NVD·high signalXBlueskyLinkedInCopy link

The NVD keywordSearch=MCP window for 2026-09-21 alone returned 7 CVEs, and 5 of them (77516, 77518, 77519, 77521, 61612) are failures to apply an existing check on a second code path, not new missing controls. MaxKB's dispatch path skips the per-tool grant the tool routes enforce, its detail route skips the check its list route applies, its MCP auth path skips expiry, its approval interrupt list omits execute, and CKAN's SSRF guard has now been bypassed three separate times. That is a different shape from 09-20 and 09-21, which were dominated by path traversal in file-reading tools. If you run MCP servers, the audit question this week is not 'is there a check' but 'does every entry point run it'.