Vibe Coding
Pattern: MCP servers keep skipping scope checks on OAuth-scoped tokens, with TREK, OpenWA and IBM ContextForge CVEs in one day
NVD's 2026-09-24 MCP batch included three authorization bugs. TREK before 3.3.0 registered get_trip_summary for scoped OAuth MCP tokens without requiring trips:read (CVE-2026-77321). OpenWA before 0.23.5 let a VIEWER key call the GroupGetInviteCode MCP tool (CVE-2026-91161). IBM ContextForge MCP Gateway 1.0.0 to 1.0.8 used str.startswith() for path confinement in its log-download endpoint (CVE-2026-77825). In each case the MCP tool layer was added beside an existing API without carrying over that API's permission checks, so a tool registry needs its own authorization test for every tool, separate from the REST routes.
Source
↳ Follow the thread