CVE-2026-81098

The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they were absent, so a request without any credential completed initialisation and dispatched tools. Dispatch forwarded the server's own stored credentials, the Telnyx API key and client secret together with the code-execution key, to the upstream endpoint, so an unauthenticated caller able to reach the port acted with them. The current code defaults the host to loopback, requires a server API key, and enforces it in middleware.

• CWE-306

• https://github.com/team-telnyx/telnyx-node
• https://github.com/team-telnyx/telnyx-node/pull/450
• https://github.com/team-telnyx/telnyx-node/security/advisories/GHSA-46jp-xr2h-fw7h
• https://www.vulncheck.com/advisories/telnyx-mcp-server-through-6.83.0-missing-authentication-on-streamable-http-transport

Published

Aug 27, 2026

Last Modified

Aug 27, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-81092mcp-go accepted requests on its HTTP transports without chec…6.8
• CVE-2026-81093The get-html-skeleton tool fetched a URL the caller supplied…8.6
• CVE-2026-81094The mcp-router CLI served its MCP aggregator on every interf…9.1
• CVE-2026-81095pg-aiguide started its MCP HTTP transport without enabling t…6.8
• CVE-2026-81096ToolUniverse ran caller-supplied Python inside a sandbox tha…10
• CVE-2026-81097The execute_ruby tool is documented as a read-only Ruby sand…8.4
• CVE-2026-81099tiger-slack started its MCP HTTP transport without enabling …6.8
• CVE-2026-8110Incorrect permissions assignment in the agent of Ivanti Endp…7.8
• CVE-2026-81100tiger-gh-mcp-server started its MCP HTTP transport without e…6.8
• CVE-2026-81101The configure command accepted any endpoint URL and stored i…6.5
• CVE-2026-81102The Dash MCP server bound its listener to the loopback addre…3.1
• CVE-2026-8111SQL injection in the web console of Ivanti Endpoint Manager …8.8