CVE-2026-14869 | HashiCorp terraform-mcp-server up to 1.0.x Streamable-HTTP Transport server-side request forgery

July 28, 2026 Yanac

A vulnerability was found in HashiCorp terraform-mcp-server up to 1.0.x. It has been rated as critical. This affects an unknown part of the component Streamable-HTTP Transport. The manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-14869. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More