CVE-2026-108698
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load_wasm in src/wasm/oci.rs that verifies the Cosign signature of a separately resolved tag rather than the loaded manifest. Attackers controlling registry responses for the tag can serve an unsigned malicious manifest to the loader and a signed one to Cosign, executing unsigned WebAssembly plugins with configured host capabilities.
Risk Assessment
The risk is the ability to execute unsigned plugins, potentially leading to environment integrity compromise and unauthorized resource access.
Recommendation
It is recommended to update hyper-mcp to a version that verifies the signature on the actually loaded manifest and monitor registry integrity.
Other vulnerabilities in hyper-mcp
Original NVD description (English source)
hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load_wasm in src/wasm/oci.rs that verifies the Cosign signature of a separately resolved tag rather than the loaded manifest. Attackers controlling registry responses for the tag can serve an unsigned malicious manifest to the loader and a signed one to Cosign, executing unsigned WebAssembly plugins with configured host capabilities.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS