MCP vulnerabilities shifted this week from path traversal to authorization bypass.

The NVD MCP keyword window for September 21 alone returned seven CVEs, and five of them are failures to apply an existing check on a second code path. MaxKB's dispatch path skips the per-tool grant its tool routes enforce (CVE-2026-77516), its detail route skips the check its list route applies (77518), its MCP auth path skips key expiry (77519). CKAN MCP Server's validateServerUrl guard has now been bypassed three separate times because it string-matches a hostname and never resolves DNS, and the third bypass reaches [redacted] (CVE-2026-61612, fixed in 0.4.108). The audit question this week is whether every entry point runs the check, not whether the check exists. (NVD)