CVE-2026-16326

CVE-2026-16326CVE-2026-16326

Description

In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used for subsequent requests from other clients. This vulnerability (CVE-2026-16326) is fixed in consul-mcp-server 0.1.4.

Scoring

CVSS 10.0 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Last modified2026-07-29
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.