CVE-2026-105806

{
  "etk_id": "ETK-2026-781",
  "cve_id": "CVE-2026-105806",
  "display_id": "CVE-2026-105806",
  "ghsa_id": "GHSA-2q76-m6w6-qgc6",
  "euvd_id": "EUVD-2026-93469",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper MCP API key access control in Payload plugin",
  "summary": "Payload's MCP plugin is affected in versions 3.61.0 through before 3.88.0. An authenticated user may be able to manage MCP API keys associated with another account, potentially enabling account takeover and privilege escalation.",
  "mitigation": "Upgrade Payload and plugin-mcp to version 3.88.0 or later.",
  "vendor": "payloadcms",
  "product": "payload",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 3.61.0, < 3.88.0"
      ],
      "ecosystem": "npm",
      "fixed_versions": [
        ">= 3.88.0"
      ],
      "package_name": "@payloadcms/plugin-mcp",
      "purl": "pkg:npm/@payloadcms/plugin-mcp"
    }
  ],
  "cwes": [
    862
  ],
  "cvss_score": 8.6,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
  "epss_score": 0.0025,
  "epss_percentile": 0.1565,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "mechanism_verified",
  "exploit": false,
  "pipeline_minutes": 39.07676905,
  "t0_at": "2026-10-06T15:35:17.028000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-06T16:37:10.941491+00:00",
      "days": 0.04298510984953704,
      "is_lower_bound": false,
      "measured_at": "2026-10-06T15:35:17.028000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-06T15:35:17.028000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-06T15:35:17.028000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105806"
    }
  }
}