CVE-2026-16326 consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode
Attackers can reuse other clients' Consul authentication tokens in stateless mode, leading to unauthorized access and privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-16326?
CVE-2026-16326 is a critical authentication bypass vulnerability in HashiCorp Tooling, published on 29 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used for subsequent requests from other clients. This vulnerability (CVE-2026-16326) is fixed in consul-mcp-server 0.1.4.
Weakness: CWE-488
Which versions are affected by CVE-2026-16326?
1 open source package ship an affected version, including consul.
| Package | Affected | Fixed in |
|---|---|---|
consul Bitnami | From 0.1.0 | 0.1.4 |
How do I fix CVE-2026-16326?
Upgrade consul to 0.1.4 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-16326 being exploited?
There is no known exploitation of CVE-2026-16326 in the wild and no public exploit code.
Sources
Also known as BIT-consul-2026-16326, GHSA-6c5r-pj95-xvqv.