Disclosure summary
### Impact Under certain conditions, an authenticated user could manage MCP API keys outside their intended account allowing an attacker to escalate privileges through account takeover. Applications that do not use `@payloadcms/plugin-mcp` are not affected. ### Patches Users should upgrade to `@payloadcms/plugin-mcp` version `3.88.0` or later. ### Workarounds Upgrading is recommended. Until then, disable the MCP plugin or restrict MCP API-key management to trusted users.
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
GitHub Reviewed Security Advisories · GHSA-2q76-m6w6-qgc6
Open original source · Updated Oct 06, 2026
Payload: Improper access control for MCP API keys
Source severity: HIGH / 8.6
| Ecosystem | Package | Affected range | First patched |
|---|---|---|---|
| npm | @payloadcms/plugin-mcp | >= 3.61.0, < 3.88.0 | 3.88.0 |
Original records & references
- NIST NVD record
- CVE Program record
- github.com — Reviewed advisory
PUBLISHED 2026-10-06T12:09:31-04:00
MODIFIED 2026-10-06T12:09:33-04:00
INGESTED 2026-10-08T12:05:11-04:00