{"id":"CVE-2026-105806","aliases":["GHSA-2q76-m6w6-qgc6"],"url":"https://o3.security/vulnerability/CVE-2026-105806","summary":"Payload: Improper access control for MCP API keys","details":"### Impact\nUnder certain conditions, an authenticated user could manage MCP API keys outside their intended account allowing an attacker to escalate privileges through account takeover.\n\nApplications that do not use `@payloadcms/plugin-mcp` are not affected.\n\n### Patches\nUsers should upgrade to `@payloadcms/plugin-mcp` version `3.88.0` or later.\n\n### Workarounds\nUpgrading is recommended. Until then, disable the MCP plugin or restrict MCP API-key management to trusted users.","published":"2026-10-06T15:35:17.028Z","modified":"2026-10-21T02:54:34.273410857Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"npm","name":"@payloadcms/plugin-mcp","fixedVersion":"3.88.0"}],"fix":{"url":"https://github.com/payloadcms/payload/commit/025581d8c5ed836039ad85397288a30f0d3c11c1","label":"payloadcms/payload@025581d"},"references":[{"type":"WEB","url":"https://github.com/payloadcms/payload/releases/tag/v3.88.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105806.json"},{"type":"ADVISORY","url":"https://github.com/payloadcms/payload/security/advisories/GHSA-2q76-m6w6-qgc6"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105806"},{"type":"FIX","url":"https://github.com/payloadcms/payload/commit/025581d8c5ed836039ad85397288a30f0d3c11c1"},{"type":"PACKAGE","url":"https://github.com/payloadcms/payload"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-21T02:54:34.273410857Z"}}