Telnyx Mcp
Monthly
Authentication bypass in the Telnyx MCP server (team-telnyx/telnyx-node, through 6.83.0) lets any network-reachable caller invoke MCP tools with no credential. The Streamable HTTP transport bound to all interfaces and parsed auth headers in a non-failing mode, so a request lacking credentials still completed initialisation and dispatched tools - which then forwarded the server's own stored Telnyx API key, client secret, and code-execution key upstream. Reported by VulnCheck with CVSS 4.0 9.3; no public exploit identified at time of analysis.
Authentication bypass in the Telnyx MCP server (team-telnyx/telnyx-node, through 6.83.0) lets any network-reachable caller invoke MCP tools with no credential. The Streamable HTTP transport bound to all interfaces and parsed auth headers in a non-failing mode, so a request lacking credentials still completed initialisation and dispatched tools - which then forwarded the server's own stored Telnyx API key, client secret, and code-execution key upstream. Reported by VulnCheck with CVSS 4.0 9.3; no public exploit identified at time of analysis.