CVE-2026-81094 | mcp-router up to 0.6.2 CLI serve.ts access control

August 27, 2026 Yanac

A vulnerability, which was classified as critical, was found in mcp-router up to 0.6.2. Impacted is an unknown function of the file apps/cli/src/commands/serve.ts of the component CLI. The manipulation results in improper access controls.

This vulnerability was named CVE-2026-81094. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More