CVE-2026-105806: Payload: Improper access control for MCP API keys

October 6, 2026

Under certain conditions, an authenticated user could manage MCP API keys outside their intended account allowing an attacker to escalate privileges through account takeover.

Applications that do not use @payloadcms/plugin-mcp are not affected.

References

github.com/advisories/GHSA-2q76-m6w6-qgc6
github.com/payloadcms/payload/commit/025581d8c5ed836039ad85397288a30f0d3c11c1
github.com/payloadcms/payload/releases/tag/v3.88.0
github.com/payloadcms/payload/security/advisories/GHSA-2q76-m6w6-qgc6
nvd.nist.gov/vuln/detail/CVE-2026-105806

Code Behaviors & Features

Detect and mitigate CVE-2026-105806 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →