CVE-2026-16498

CriticalCVSS 10.0

Published: 28/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

26th percentile - higher than 26% of all known CVEs

Summary

Terraform-mcp-server before version 1.1.0 is vulnerable to cross-tenant credential reuse in streamable-HTTP mode, allowing one user's Terraform token to be used for tool calls on behalf of other users.

Risk Assessment

An attacker can hijack another user's session and perform Terraform operations on their behalf, leading to unauthorized infrastructure access and potential security breaches.

Recommendation

Update terraform-mcp-server to version 1.1.0 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This vulnerability, CVE-2026-16498, is fixed in terraform-mcp-server 1.1.0.