Summary
HashiCorp patched three critical vulnerabilities in the Terraform MCP Server, including a CVSS 10.0 flaw that allows cross-tenant credential reuse. These bugs enable attackers to steal Terraform tokens and access unauthorized workspaces in multi-user HTTP deployments.
Take Action:
If you run the Terraform MCP Server in HTTP mode (versions 0.2.1 through 1.0.0), update to version 1.1.0 or later ASAP. The worst flaw lets one user's Terraform token be reused by someone else. Until you can patch, block access to the streamable-HTTP listener so only trusted users on trusted networks can reach it, and treat MCP session IDs like passwords; If you're only running single-user stdio mode, you're not affected.
Read the full article on BeyondMachines
This article was originally published on BeyondMachines
Top comments (0)