Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used for subsequent requests from other clients. This vulnerability (CVE-2026-16326) is fixed in consul-mcp-server 0.1.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-29 | 1 | Disclosure1 |
| 2026-09-03 | 1 | General1 |
CVE-2026-16326: Consul MCP Server Session Isolation Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04wDCjc0
Post summary
The snippet references a title and link to an article about a new Consul MCP Server session isolation issue but contains no detailed technical or exploit information.
CVE-2026-16326 In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to… https://www.cve.org/CVERecord?id=CVE-2026-16326
Post summary
The entry announces CVE‑2026‑16326, noting a session state isolation flaw in consul‑mcp‑server v0.1.0–0.1.3 that could expose Consul authentication tokens, without providing a PoC, exploit, or remediation details.