← All credits

This issue was reported to HashiCorp by Juan Pablo Martinez Kuhn of Coinspect.

1 vulnerability record and advisories credit this contributor.

CVE-2026-16496
terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user