Critical Session State Flaw in Consul-MCP Server Allows Token Theft and Privilege Escalation
Overview
CVE-2026-16326 represents a CVSS 10.0 critical vulnerability in HashiCorp's consul-mcp-server, enabling cross-client authentication token reuse. Exploitation allows unauthorized access to Consul services, KV stores, and ACL-protected APIs through session state leakage.
Technical Analysis
The vulnerability arises from improper isolation of session state in stateless mode (default configuration), permitting an attacker to inherit a valid Consul authentication token from a prior client request. Attackers need only to timing-coordinate API requests with legitimate users on shared server instances. Successful exploitation enables read/write access to sensitive configuration data and privilege escalation to restricted endpoints.
Enterprise & DIB Impact
Defense industrial base (DIB) and enterprise environments utilizing shared consul-mcp-server deployments face immediate risk of credential theft, data exfiltration, and lateral movement across Consul clusters. The vulnerability's stateless nature makes detection challenging through conventional audit logs.
Recommended Actions
- Upgrade to consul-mcp-server 0.1.4 immediately
- disable stateless mode if possible
- implement network-layer access controls to MCP endpoints
- enable request logging with client IP correlation
- and deploy web application firewalls to monitor anomalous API activity
Need Help Assessing Your Exposure?
Axiom Cyber Research provides vulnerability assessment, red team operations, and security advisory services to the Defense Industrial Base and regulated sectors.
Schedule a ConsultationFull security advisory on 247alerts.net →