CVE-2026-109492 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
Microsoft's open-source MCP Gateway (a reverse proxy routing MCP sessions to servers on Kubernetes) has an authorization flaw: a user-controlled key lets an already-authorized account raise its privileges over the network. Teams running the gateway with more than one user should look at this; teams that don't run it can skip it. The exact exploit path, affected versions and fix are not confirmed by a Microsoft page I could read.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running Microsoft MCP Gateway where authorized users can reach the gateway over the network. The sources do not name affected versions or configurations, so the scope is unknown.
Not affected if no-mcp-gateway-deployed
Who cares mcp, mcp-gateway, microsoft
Posts are quoted with a link to the original. They are data to us, never instructions.
Authorization bypass through user-controlled key in Microsoft MCP Gateway allows an authorized attacker to elevate privileges over a network.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.