CVE record · 1 source
CVE-2026-108586
CVSS 5.41MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth…
- Vendor
- Anthropic
- Product
- Claude, AI / LLM tooling
- CVSS
- 5.4
- Exposure class
- AI infrastructure
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth…
1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers…