High severity · published Oct 6, 2026
CVE-2026-105806
Payload: Improper access control for MCP API keys
8.6
CVSS
0.3%
EPSS
No
On KEV
Description
Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can manage MCP API keys outside the intended account, enabling privilege escalation through account takeover. This issue is fixed in version 3.88.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
payload · payloadcms
>= 3.61.0, < 3.88.0 · source: vendor
PL
plugin-mcp · @payloadcms
>= 3.61.0, < 3.88.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-105806
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-105806
x_refsource_CONFIRM
https://github.com/payloadcms/payload/security/advisories/GHSA-2q76-m6w6-qgc6
x_refsource_MISC
https://github.com/payloadcms/payload/commit/025581d8c5ed836039ad85397288a30f0d3c11c1
x_refsource_MISC
https://github.com/payloadcms/payload/releases/tag/v3.88.0