Terraform-MCP-Server <1.1.0: Cross-Tenant Credential Reuse via Streamable-HTTP
CVE-2026-16498 Published on July 28, 2026
terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode
The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This vulnerability, CVE-2026-16498, is fixed in terraform-mcp-server 1.1.0.
Weakness Type
Exposure of Data Element to Wrong Session
The product does not sufficiently enforce boundaries between the states of different sessions, causing data to be provided to, or used by, the wrong session.
Affected Versions
HashiCorp Tooling:- Version 0.3.0 and below 1.1.0 is affected.