CVE-2026-105806: @payloadcms/plugin-mcp Improper Access Control for MCP API Keys
Summary
CVE-2026-105806: Payload: Improper access control for MCP API keys. Affects @payloadcms/plugin-mcp versions >= 3.61.0, < 3.88.0. Fixed in 3.88.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The @payloadcms/plugin-mcp is a plugin for the Payload CMS that facilitates the management of MCP API keys. This plugin is designed to allow users to securely manage their API keys, enabling various functionalities within the Payload CMS ecosystem. However, a vulnerability has been identified that allows authenticated users to manage API keys outside their intended account, posing a significant security risk.
Vulnerability Detail
The vulnerability arises from improper access control mechanisms within the MCP API key management functionality. Under certain conditions, an authenticated user can manipulate API keys that belong to other accounts, leading to potential account takeover and privilege escalation. This flaw is classified under CWE-862, indicating a failure to restrict access to sensitive operations based on user roles.
How To Fix
Minimum fixed version
3.88.0
This is the first release that contains the fix.
npm install @payloadcms/plugin-mcp@3.88.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Until the upgrade is completed, it is recommended to disable the MCP plugin or restrict access to MCP API key management to trusted users only. This can be done by modifying user roles or permissions within your application settings.
Conclusion
In summary, CVE-2026-105806 presents a serious security risk due to improper access control in the @payloadcms/plugin-mcp. Users are strongly encouraged to upgrade to the patched version to protect their applications from potential exploitation.
See every vulnerability recorded for @payloadcms/plugin-mcp →
FAQ
CVE-2026-105806 is a vulnerability in the @payloadcms/plugin-mcp that allows improper access control for managing MCP API keys.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which analyzes your package-lock.json for vulnerabilities.
If exploited, this vulnerability can lead to account takeover and privilege escalation, allowing unauthorized users to manage API keys.
Yes, users should upgrade to version 3.88.0 or later of the @payloadcms/plugin-mcp to mitigate this vulnerability.
As a temporary measure, disable the MCP plugin or restrict access to trusted users until you can perform the upgrade.
