Tools AI Risk Radar ai-incident-0152
Incident record
Payload fixes access to other users’ MCP keys
- Severity
- High
- Status
- Patched
- Type
- Infra Vuln
- Target
- @payloadcms/plugin-mcp
- Actor
- researcher
- CVE
- CVE-2026-105806
What happened
An authenticated user could manage MCP API keys outside their intended account and potentially take over that account. The affected feature is the optional MCP plugin.
@payloadcms/plugin-mcp: affected >= 3.61.0, < 3.88.0; fixed in 3.88.0. The date shown is the maintainer’s original disclosure date.
Sources
- Primary disclosuregithub.com/payloadcms/payload/security/advisories/GHSA-2q76-…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026