https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T17:50:19.386885+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-14869 CVE-2026-14869 — terraform-mcp-server vulnerable to server side request forgery leading to token exposure 2026-09-28T17:50:19.387998+00:00

Affected: HashiCorp Tooling

The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client to redirect the server's Terraform API requests, and the server-side authorization token, to an attacker-controlled endpoint. This vulnerability, CVE-2026-14869, is fixed in terraform-mcp-server 1.1.0.