CVE-2026-14869
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client to redirect the server's Terraform API requests and the server-side authorization token to an attacker-controlled endpoint.
Risk Assessment
An attacker can access internal network resources of the server and intercept the authorization token, potentially leading to unauthorized access to Terraform API.
Recommendation
Immediately update terraform-mcp-server to version 1.1.0 or later.
Other vulnerabilities in terraform-mcp-server
See all- CVE-2026-16498Critical
Terraform-mcp-server before version 1.1.0 is vulnerable to cross-tenant credential reuse in streamable-HTTP mode, allowing one user's Terraform token to be used for tool calls on behalf of other users.
- CVE-2026-16496High
The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials.
Original NVD description (English source)
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client to redirect the server's Terraform API requests, and the server-side authorization token, to an attacker-controlled endpoint. This vulnerability, CVE-2026-14869, is fixed in terraform-mcp-server 1.1.0.