Medium severity6.0NVD Advisory· Published Jun 26, 2026· Updated Jun 27, 2026
CVE-2026-48529
CVE-2026-48529
Description
GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from different users share this singleton and their lockdown-related GraphQL queries are executed using the first user's credentials. The singleton is never updated to reflect later users' tokens. This vulnerability is fixed in 1.1.2.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/github/github-mcp-serverGo | >= 0.22.0, < 1.1.2 | 1.1.2 |
Affected products
3- osv-coordsRange: < 0.0.20260723T184607-160000.1.1
<1.1.2+ 1 more
- (no CPE)range: <1.1.2
- (no CPE)range: <1.1.2
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.