CVE-2026-105806

published 2026-10-06

CVE-2026-105806: Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can…

Priority P3 53 high 8.6 CVSS 4.0

AV N AC L AT N PR L UI N VC H VI H VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can manage MCP API keys outside the intended account, enabling privilege escalation through account takeover. This issue is fixed in version 3.88.0.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
payloadcms	payload	—	—
payloadcms	plugin-mcp	—	—
payloadcms	plugin-mcp	>= 3.61.0 < 3.88.0	3.88.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-862