CVE-2026-16498
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Terraform-mcp-server before version 1.1.0 is vulnerable to cross-tenant credential reuse in streamable-HTTP mode, allowing one user's Terraform token to be used for tool calls on behalf of other users.
Risk Assessment
An attacker can hijack another user's session and perform Terraform operations on their behalf, leading to unauthorized infrastructure access and potential security breaches.
Recommendation
Update terraform-mcp-server to version 1.1.0 or later, which includes a fix for this vulnerability.
Other vulnerabilities in terraform-mcp-server
See all- CVE-2026-16496High
The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials.
- CVE-2026-14869High
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client to redirect the server's Terraform API requests and the server-side authorization token to an attacker-controlled endpoint.
Original NVD description (English source)
The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This vulnerability, CVE-2026-16498, is fixed in terraform-mcp-server 1.1.0.