CVE-2026-105806: Payload: Improper access control for MCP API keys

Severity: high (CVSS 8.6 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-06 · updated 2026-10-06
Weakness: CWE-862

Description

Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can manage MCP API keys outside the intended account, enabling privilege escalation through account takeover. This issue is fixed in version 3.88.0.

Affected products

payloadcms payload: from 3.61.0, < 3.88.0
@payloadcms plugin-mcp: from 3.61.0, < 3.88.0

References

https://github.com/payloadcms/payload/commit/025581d8c5ed836039ad85397288a30f0d3c11c1
https://github.com/payloadcms/payload/releases/tag/v3.88.0
https://github.com/payloadcms/payload/security/advisories/GHSA-2q76-m6w6-qgc6

Get alerted when CVE-2026-105806 or the next vulnerability affects your stack