20:01
2026-08-24
forkast.news
ai-safety
The Architectural Failure Behind the MCP Session Isolation Crisis
Hashicorp disclosed CVE-2026-16498, a CVSS 10.0 vulnerability in the Terraform MCP Server that allowed cross-tenant credential reuse in streamable-HTTP stateless transport mode, fixed in version 1.1.0…