[ Vendor · 1 CVEs ]
1mcp-app
CVEs affecting 1mcp-app published in the last 30 days, plus any 1mcp-app CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108586 | 10 Oct 2026 | CVSS 5.4 | 1mcp-app @1mcp/agent1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth… |