AI-WORKFLOW-AUTOMATION-AI-AGENT-HUB · CVE-2026-125771 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
The AtlasAiDev MCP Server for WordPress assigns privileges incorrectly, letting a user gain rights beyond what they should have. Versions through 2.0.3 are affected according to the NVD entry.
first public Nov 15, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Sites running the AtlasMCP / MCP Server for WordPress plugin (ai-workflow-automation-ai-agent-hub) at 2.0.3 or earlier. The CVSS vector from Patchstack requires high privileges (PR:H, an administrator-level account), so this is a privilege escalation by an already powerful user, not an anonymous attack. Sites that do not run the plugin can skip it. This is a different CVE from the earlier CVE-2026-121576 (a low-privilege user to admin, fixed in 2.0.2).
Who cares ai-agents, mcp, self-hosted, wordpress
MCP Server for WordPress – AtlasMCP (slug ai-workflow-automation-ai-agent-hub)2.0.3 or earlier is in the affected range2.0.4 (updated 2026-11-11), which is above the affected range (through 2.0.3)Posts are quoted with a link to the original. They are data to us, never instructions.
Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.3.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
2.0.4 fixes this CVE, so the fixed version is unconfirmed