Read the docs

1mcp-app

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

1mcp-app records in CISA KEV

No 1mcp-app vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70574 CVE-2026-108586 · GHSA-w2j7-xxh9-9q67

1MCP Agent OAuth tag-scope bypass via negated tag filter

Priority LOW 23

1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-10 No fix listed CWE-863
Open these records in search →