Description
Authorization bypass through user-controlled key in Microsoft MCP Gateway allows an authorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | mcp-gateway | 1.0.0.0 – < 1.0.0 | 1.0.0 |
References
- Microsoft MCP Gateway Elevation of Privilege Vulnerability vendor-advisory patch