Auth bypass in @Payloadcms Plugin-Mcp
CVE-2026-105806
Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can manage MCP API keys outside the intended account, enabling privilege escalation through account takeover. This issue is fixed in version 3.88.0.
Vulnerability class: Broken Access Control
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- @Payloadcms Plugin-Mcp — versions >= 3.61.0, < 3.88.0
- Payloadcms Payload — versions >= 3.61.0, < 3.88.0