Tag: Security Hardening

CVE-2026-13341: Kong Konnect MCP Server Prompt-Injection Risk

August 4, 2026July 30, 2026 by MCPwatch Editorial Desk

authentication free stock image for MCPwatch editorial use

CVE-2026-13341 affects Kong mcp-konnect before 1.0.0. The advisory describes untrusted analytics data, credential exposure risk, and unintended API requests.

CVE-2026-66012: SiYuan MCP Endpoint Lacks Required Authorization

August 4, 2026July 29, 2026 by MCPwatch Editorial Desk

CVE-2026-66012 affects SiYuan before 3.7.2 when its MCP endpoint is exposed in an anonymous-publish configuration. Review authorization and upgrade.

CVE-2026-65594: n8n MCP OAuth Check Breaks Project Isolation

August 4, 2026July 29, 2026 by MCPwatch Editorial Desk

CVE-2026-65594 affects n8n MCP Server Trigger workflows using n8n OAuth2. Review exposure, upgrade to 2.29.8 or 2.30.1, and verify project isolation.

MCP 2026-07-28 Specification: Security Changes Operators Must Verify

July 28, 2026July 28, 2026 by MCPwatch Editorial Desk

alternate editorial crop of datacenter free stock image for MCPwatch

The official MCP 2026-07-28 release candidate changes sessions, authorization, tool schemas, and server-rendered UIs. Here is the security review for operators.