CVE-2026-109492
Microsoft MCP Gateway Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft MCP Gateway allows an authorized attacker to elevate privileges over a network.
CVSS 3.1 · 8.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products