Tag: session isolation

CVE-2026-16496: Stateful Mode Session Isolation Failure in Terraform MCP Server

CVE-2026-16496 (CVSS 8.9) is a stateful-mode session isolation flaw in Terraform MCP Server. The credential cache uses the MCP session ID as…