Unrated severityNVD Advisory· Published Jul 29, 2026· Updated Jul 29, 2026
consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode
CVE-2026-16326
Description
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used for subsequent requests from other clients. This vulnerability (CVE-2026-16326) is fixed in consul-mcp-server 0.1.4.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=0.1.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.