{"uuid": "9fe0c3f6-9271-4dc6-b6b4-9cc613a8476a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105806", "type": "seen", "source": "https://gist.github.com/alon710/20c58cb4d07d11bc54a823c67d892ac1", "content": "# CVE-2026-105806: CVE-2026-105806: Privilege Escalation and Missing Authorization in @payloadcms/plugin-mcp\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-10-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-105806\n\n## Summary\nCVE-2026-105806 is an improper access control vulnerability within the Model Context Protocol (MCP) plugin for Payload CMS. Authenticated users with low privileges can manipulate API key creation and mapping to associate keys with arbitrary users, including administrators. This allows total session takeovers and privilege escalation via MCP-authenticated API requests.\n\n## TL;DR\nA missing authorization check in @payloadcms/plugin-mcp allows authenticated low-privilege users to generate MCP API keys mapped to administrative accounts, resulting in privilege escalation and full account takeover.\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS v4.0**: 8.6\n- **Exploit Status**: Unproven / None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Payload CMS\n- @payloadcms/plugin-mcp\n- **@payloadcms/plugin-mcp**: >= 3.61.0, < 3.88.0 (Fixed in: `3.88.0`)\n\n## Mitigation\n\n- Upgrade @payloadcms/plugin-mcp to version 3.88.0 or higher.\n- Disable the MCP plugin if it is not actively required.\n- Manually override collection permissions using overrideApiKeyCollection hook.\n\n**Remediation Steps:**\n1. Verify the current version of @payloadcms/plugin-mcp in package.json.\n2. Run npm install @payloadcms/plugin-mcp@3.88.0 or yarn upgrade.\n3. Deploy the updated code and restart the Payload CMS service.\n\n## References\n\n- [GitHub Security Advisory GHSA-2q76-m6w6-qgc6](https://github.com/payloadcms/payload/security/advisories/GHSA-2q76-m6w6-qgc6)\n- [Official Patch Commit](https://github.com/payloadcms/payload/commit/025581d8c5ed836039ad85397288a30f0d3c11c1)\n- [Release v3.88.0](https://github.com/payloadcms/payload/releases/tag/v3.88.0)\n- [CVE-2026-105806 Record](https://www.cve.org/CVERecord?id=CVE-2026-105806)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-105806) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-07T02:30:32.000000Z"}