CVE-2026-48039

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integration.py:272` unconditionally forwards unauthenticated Streamable HTTP requests to downstream MCP tool handlers without issuing a `401` response, allowing any network-reachable caller to invoke MCP tools without authentication. When no per-request credential is present, tool handlers fall back to the `META_ACCESS_TOKEN` environment variable, and when the downstream Meta Graph API call fails, `api.py:263–269` serialises the raw `httpx` request URL—including the operator's `access_token` as a query parameter—into the JSON-RPC response body, delivering the credential to the unauthenticated caller. Version 1.0.109 fixes the issue.

• CWE-287

• https://github.com/pipeboard-co/meta-ads-mcp/releases/tag/1.0.109
• https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-9gw6-46qc-99vr
• https://github.com/pypa/advisory-database/tree/main/vulns/meta-ads-mcp/PYSEC-2026-413.yaml
• https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-9gw6-46qc-99vr

Published

Aug 7, 2026

Last Modified

Aug 7, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48033Hulumi is an open-source toolkit that ships secure-by-defaul…8.4
• CVE-2026-48034Hulumi is an open-source toolkit that ships secure-by-defaul…8.5
• CVE-2026-48035Hulumi is an open-source toolkit that ships secure-by-defaul…7.1
• CVE-2026-48036Hulumi is an open-source toolkit that ships secure-by-defaul…8.4
• CVE-2026-48037Hulumi is an open-source toolkit that ships secure-by-defaul…6.3
• CVE-2026-48038joi is a schema description language and data validator for …5.3
• CVE-2026-4804The Zakra theme for WordPress is vulnerable to Stored Cross-…6.4
• CVE-2026-48040The netty incubator codec.bhttp is a java language binary ht…9.1
• CVE-2026-48042Envoy is an open source edge and service proxy designed for …7.5
• CVE-2026-48043Netty is a network application framework for development of …7.5
• CVE-2026-48044Envoy is an open source edge and service proxy designed for …7.5
• CVE-2026-48045Zeroconf is a pure Python implementation of multicast DNS se…6.5