CVE-2026-114123

validated

GHSA-8764-fh3m-wf7g ↗

check availablenot proven exploitable

cve.orgpublic pockev

dynamics365ninja d365fo-mcp-server <= 1.10.1

fixed in 1.11.0

CWE-306 Missing Authentication for Critical Function

ETK-2026-2338, permanent identifier

pkg:npm/d365fo-mcp

cvss7.5cna vendorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

+35mTTV

9mAI analysis

Check if you are vulnerable

timeline

0 = trigger signal

trigger signal (cve.org) +0mcheck available+35magent stopped

+10min

+20min

+30min

description

d365fo-mcp-server versions before 1.11.0 can expose its MCP query endpoint without authentication when deployed with an empty API key. A remote attacker can retrieve indexed X++ source snippets and metadata if the service is publicly reachable and lacks upstream authentication or network restrictions.

mitigation

Upgrade d365fo-mcp-server to version 1.11.0. Set a non-empty API key and restrict endpoint access with network controls or upstream authentication.

fixed in 1.11.0

check

available

exploit

automation

deterministic

auth required

EPSS

–

agent run time

cve.org record, t = 0

2026-10-21 16:57Z

Δ to public poc

–

Δ to kev

–

outcome

Check only, differential: the check fires on the vulnerable build and is silent on the patched one.

source signals

Public signals that triggered or updated the pipeline. These are inputs for the deltas above.

2026-10-21 16:57Z
cve_org: trigger signal, started the run
https://www.cve.org/CVERecord?id=CVE-2026-114123

this entry in the feed

GET /api/v1/feed/CVE-2026-114123

{
  "etk_id": "ETK-2026-2338",
  "cve_id": "CVE-2026-114123",
  "display_id": "CVE-2026-114123",
  "ghsa_id": "GHSA-8764-fh3m-wf7g",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated access in d365fo-mcp-server",
  "summary": "d365fo-mcp-server versions before 1.11.0 can expose its MCP query endpoint without authentication when deployed with an empty API key. A remote attacker can retrieve indexed X++ source snippets and metadata if the service is publicly reachable and lacks upstream authentication or network restrictions.",
  "mitigation": "Upgrade d365fo-mcp-server to version 1.11.0. Set a non-empty API key and restrict endpoint access with network controls or upstream authentication.",
  "vendor": "dynamics365ninja",
  "product": "d365fo-mcp-server",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 1.10.1"
      ],
      "ecosystem": "npm",
      "fixed_versions": [
        "1.11.0"
      ],
      "package_name": "d365fo-mcp",
      "purl": "pkg:npm/d365fo-mcp"
    }
  ],
  "cwes": [
    306
  ],
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 8.828044216666667,
  "t0_at": "2026-10-21T16:57:47.278000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-21T17:32:27.907780+00:00",
      "days": 0.024081363194444445,
      "is_lower_bound": false,
      "measured_at": "2026-10-21T16:57:47.278000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-21T16:57:47.278000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-21T16:57:47.278000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114123"
    }
  }
}

published 2026-10-21 17:23Z
last change 2026-10-21 18:17Z

Need the technical details behind an entry?

Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.