What’s Vulnerable › Products

1mcp-app @1mcp/agent vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your 1mcp-app @1mcp/agent version is affected

Latest 1mcp-app @1mcp/agent vulnerabilities

• CVE-2026-108586 — 1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via Negated Tag Filter (CVSS 5.4)