All vulnerabilities
CVE-2026-105806GHSA-2q76-m6w6-qgc6

@payloadcms/plugin-mcp: Payload: Improper access control for MCP API keys

payloadcms @payloadcms/plugin-mcpnpmLibraries & packages
Open in ThreatlineRecord JSON
CVSS
8.6High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.25%Chance of exploitation activity in the next 30 days, higher than 15% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3.88.0Fixed versionGitHub
Published6 Oct 2026Updated 6 Oct 2026CVE List

What fixes it

  • 3.88.0@payloadcms/plugin-mcp, npmGitHubnpm install @payloadcms/plugin-mcp@3.88.0

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Impact

Under certain conditions, an authenticated user could manage MCP API keys outside their intended account allowing an attacker to escalate privileges through account takeover.

Applications that do not use @payloadcms/plugin-mcp are not affected.

Patches

Users should upgrade to @payloadcms/plugin-mcp version 3.88.0 or later.

Workarounds

Upgrading is recommended. Until then, disable the MCP plugin or restrict MCP API-key management to trusted users.

Text from GitHub Advisory Database

Affected versions 4

  • @payloadcms/plugin-mcp, npm>= 3.61.0, < 3.88.0GitHub
  • payloadaffected: >= 3.61.0, < 3.88.0CVE List
  • plugin-mcpaffected: >= 3.61.0, < 3.88.0CVE List
  • @payloadcms/plugin-mcp, npmfrom 3.61.0, fixed in 3.88.0OSV

References 4