Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-81098— Telnyx MCP Server through 6.83.0 Missing Authentication on Streamable HTTP Transport

Quick assessment

Affected
team-telnyx telnyx-mcp
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Telnyx MCP 服务器将其 HTTP 传输暴露在所有网络接口上，且未要求调用方提供身份凭证。 在根路径上以绑定到所有接口的监听器提供 MCP 服务，并在未提供认证头时不会报错的解析模式下解析调用方的认证头，因此任何未携带任何凭证的请求都能完成初始化并触发工具执行。调度逻辑会将服务器自身存储的凭证（包括 Telnyx API 密钥、客户端密钥以及代码执行密钥）转发至上游端点，导致任何能够访问该端口的未认证调用方都能以这些凭证的身份行事。当前代码已将默认绑定改为回环地址，要求提供服务器 API 密钥，并在中间件中

CVSS 9.1 · Critical

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-81098

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Telnyx MCP Server through 6.83.0 Missing Authentication on Streamable HTTP Transport
Source: CVE Program / CVE List V5
Vulnerability Description
The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they were absent, so a request without any credential completed initialisation and dispatched tools. Dispatch forwarded the server's own stored credentials, the Telnyx API key and client secret together with the code-execution key, to the upstream endpoint, so an unauthenticated caller able to reach the port acted with them. The current code defaults the host to loopback, requires a server API key, and enforces it in middleware.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
team-telnyx telnyx-mcp 0 ~ 6.83.0 -

II. Public POCs for CVE-2026-81098

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-81098

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-81098 (2)

Vendor Pages for CVE-2026-81098 (1)

IV. Related Vulnerabilities

Same weakness: CWE-306

V. Comments for CVE-2026-81098

No comments yet

Leave a comment