https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:05:59.736809+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-consul-2026-16498 BIT-consul-2026-16498 — terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode 2026-10-02T10:05:59.789369+00:00

Affected: Bitnami: consul

The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This vulnerability, CVE-2026-16498, is fixed in terraform-mcp-server 1.1.0.

 https://cve.radiocsirt.org/vuln/euvd-2026-342172 EUVD-2026-342172 2026-10-02T10:05:59.789425+00:00 EUVD-2026-342172 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16498 fkie_cve-2026-16498 2026-10-02T10:05:59.789441+00:00

The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This vulnerability, CVE-2026-16498, is fixed in terraform-mcp-server 1.1.0.

 https://cve.radiocsirt.org/vuln/ghsa-vq72-755f-9mrm GHSA-vq72-755f-9mrm 2026-10-02T10:05:59.789465+00:00

The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This vulnerability, CVE-2026-16498, is fixed in terraform-mcp-server 1.1.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2572 WID-SEC-W-2026-2572 — Hashicorp Terraform MCP Server: Mehrere Schwachstellen 2026-10-02T10:05:59.789481+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Hashicorp Terraform MCP Server ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.