Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@payloadcms/plugin-mcp
@payloadcms/plugin-mcp vulnerabilities (npm)
1 vulnerability.
@payloadcms/plugin-mcp
npm
Payload: Improper access control for MCP API keys
CVE-2026-105806
Fix available
8.6
High
October 6, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open