Full Report
HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django. The three most serious: An unauthenticated flaw in Veeam's console that hands over a managed agent's credentials, rated 9.5 A cross-tenant flaw in HashiCorp's MCP server that lets one user's Terraform token be reused for later users'
Analysis Summary
# Vulnerability: Critical Flaws in Terraform MCP Server
## CVE Details
- **CVE ID:** CVE-2026-16498
- **CVSS Score:** 10.0 (Critical)
- **CWE:** Not specified (Cross-Tenant Credential Reuse)
## Affected Systems
- **Products:** HashiCorp Terraform MCP Server
- **Versions:** Versions prior to 1.1.0
- **Configurations:** Deployments utilizing **Streamable HTTP transport** in multi-user/centralized mode. Local single-user setups using `stdio` are unaffected.
## Vulnerability Description
The flaw exists in the stateless HTTP mode of the Terraform MCP server. The underlying MCP library fails to assign unique session identifiers, and the server’s credential cache relies solely on these identifiers to differentiate between users. Consequently, a Terraform token belonging to one user can be improperly reused for subsequent requests made by different users, leading to a complete breakdown of tenant isolation.
## Exploitation
- **Status:** Not exploited in the wild (as of August 5, 2026); No public PoC available.
- **Complexity:** Low (In stateless HTTP mode, isolation fails by default).
- **Attack Vector:** Network
## Impact
- **Confidentiality:** Total (Access to other users' Terraform tokens/secrets).
- **Integrity:** Total (Ability to perform actions on behalf of other tenants).
- **Availability:** High
## Remediation
### Patches
- Update to **Terraform MCP Server version 1.1.0** or later (Version 1.2.0 is also available).
### Workarounds
- Revert to `stdio` mode (local single-user setup) if centralized HTTP transport is not strictly required.
---
# Vulnerability: Veeam Service Provider Console Unauthenticated Impersonation
## CVE Details
- **CVE ID:** CVE-2026-58073
- **CVSS Score:** 9.5 (Critical)
- **CWE:** Not specified (Authentication Bypass/Impersonation)
## Affected Systems
- **Products:** Veeam Service Provider Console (VSPC)
- **Versions:** VSPC version 9.2.1.33875 and all earlier version 9 builds.
- **Configurations:** Standard installations of the multi-tenant management console.
## Vulnerability Description
This flaw allows an unauthenticated network attacker to impersonate a managed agent. Successful exploitation enables the attacker to obtain the credentials associated with that managed agent, potentially compromising the backup infrastructure and client data managed by the service provider.
## Exploitation
- **Status:** Not exploited; No public PoC available.
- **Complexity:** High (While unauthenticated, the exploitation path is not "straight-line").
- **Attack Vector:** Network
## Impact
- **Confidentiality:** Total (Access to agent credentials).
- **Integrity:** High
- **Availability:** Medium
## Remediation
### Patches
- Update to **Veeam Service Provider Console build 9.3.0.35057**.
---
# Vulnerability: GeoDjango Spatial Lookup Remote Code Execution
## CVE Details
- **CVE ID:** Not explicitly numbered in the snippet (Referenced as part of Django 6.0.8/5.2.17 release)
- **CVSS Score:** Not specified (Estimated High/Critical)
- **CWE:** Not specified (Arbitrary File Write / Path Traversal)
## Affected Systems
- **Products:** Django Software Foundation (GeoDjango)
- **Versions:** Versions prior to 6.0.8 and 5.2.17.
- **Configurations:** Requires a staff user account with "view" permissions on a registered model that contains a spatial field.
## Vulnerability Description
A flaw in GeoDjango's spatial lookups allows an attacker to perform an arbitrary file write to the disk. In certain server configurations, this file write can be escalated to achieve remote code execution (RCE). The attack path is reachable via the Django admin interface.
## Exploitation
- **Status:** Not exploited; No public PoC available.
- **Complexity:** Medium (Requires staff-level access).
- **Attack Vector:** Network
## Impact
- **Confidentiality:** High
- **Integrity:** Total (File write/Code execution).
- **Availability:** High
## Remediation
### Patches
- Update to **Django 6.0.8** or **Django 5.2.17**.
## Detection
- Monitor for unusual file creation events in the web root or media folders.
- Audit Django logs for staff users accessing spatial lookup functions on models they do not typically manage.
## References
- Veeam Advisory: hxxps://www.veeam[.]com/kb4893
- HashiCorp Advisory: hxxps://discuss.hashicorp[.]com/t/hcsec-2026-23-multiple-vulnerabilities-impacting-hashicorp-terraform-mcp-server/77606
- Django Security: hxxps://www.djangoproject[.]com/weblog/