CVE-2026-114123 | dynamics365ninja d365fo-mcp-server up to 1.10.0 ApiKeyAuth apiKeyAuth.ts apiKey authorization

October 21, 2026 Yanac

A vulnerability was found in dynamics365ninja d365fo-mcp-server up to 1.10.0 and classified as problematic. Affected is an unknown function of the file src/middleware/apiKeyAuth.ts of the component ApiKeyAuth. Executing a manipulation of the argument apiKey can lead to missing authorization.

This vulnerability appears as CVE-2026-114123. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More