CVE-2026-108856
Received Received - Intake

Authorization Bypass in UnicomAI Wanwu

Publication date: 2026-10-11

Last updated on: 2026-10-11

Assigner: VulnCheck

Description
UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers via POST /v1/appspace/app/key. Attackers supplying a victim's MCP server UUID with appType mcpserver can open MCP sessions and invoke the server's tools using the victim's upstream authentication.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-11
Last Modified
2026-10-11
Generated
2026-10-11
AI Q&A
2026-10-11
EPSS Evaluated
N/A
NVD
CVE-2026-108856
EUVD
EUVD-2026-97007

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
UnicomAI Wanwu 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

UnicomAI Wanwu through version 0.6.5 has an authorization bypass flaw. Authenticated users can exploit a POST endpoint to mint AppKeys tied to other users' MCP servers by providing a victim's server UUID and setting appType to mcpserver. This allows attackers to open MCP sessions and use the victim's tools via their upstream authentication.

Detection Guidance

To detect this vulnerability, monitor HTTP POST requests to /v1/appspace/app/key endpoint. Check for requests with appType set to mcpserver and appId matching a victim's MCP server UUID. Look for unauthorized key generation attempts in application logs.

Impact Analysis

If exploited, this vulnerability could let attackers impersonate other users, access their MCP server tools, or perform actions on their behalf. This may lead to unauthorized data access, service disruption, or misuse of privileged functions depending on the MCP server's capabilities.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data processed by MCP servers, potentially violating GDPR's data protection principles (e.g., integrity and confidentiality) and HIPAA's requirements for safeguarding protected health information. Unauthorized access may result in data breaches, non-compliance with access control mandates, and failure to meet audit requirements.

Mitigation Strategies

Update UnicomAI Wanwu to the latest version beyond 0.6.5 to address the authorization bypass. Review and restrict access to the POST /v1/appspace/app/key endpoint. Monitor MCP server UUIDs and appType mcpserver usage for unauthorized sessions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108856. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart