Skip to content

CVE record · 1 source

CVE-2026-108856

CVSS 4.2

UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP…

Vendor: Anthropic
Product: Claude, AI / LLM tooling
CVSS: 4.2
Exposure class: AI infrastructure

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

8

CVE NVD 20d ago

UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP…

UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers via POST /v1/appspace/app/key. Attackers supplying a victim's MCP…

CVSS 4.2 CVE-2026-108856 Anthropic