{"id":"CVE-2026-55604","revision":"164e53222939477782bc3d69af491f0b","records":[{"revision":"164e53222939477782bc3d69af491f0b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-55604","aliases":[],"title":"@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key","description":"DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.7.0, the process-global `SessionStore` accepts caller-supplied `session_id` values without binding them to any authenticated principal or transport session. An attacker can enumerate active session IDs via `deepseek_sessions`, then reuse a victim-controlled `session_id` in `deepseek_chat` to retrieve and continue the victim's conversation context. Version 1.7.0 contains a patch.","state":0,"publishedAt":"2026-07-09T21:13:15.713+00:00","modifiedAt":"2026-07-10T14:42:09.579+00:00","affected":[{"ecosystem":"Vendor product","name":"deepseek-mcp-server","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"arikusi\",\n                    \"product\": \"deepseek-mcp-server\",\n                    \"versions\": [\n                        {\n                            \"version\": \">= 1.4.2, < 1.7.0\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","score":8.6,"severity":"HIGH"}],"references":["https://github.com/arikusi/deepseek-mcp-server/security/advisories/GHSA-fh3r-g96v-f578","https://github.com/arikusi/deepseek-mcp-server/releases/tag/v1.7.0"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-55604","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-55604","identifiers":["CVE-2026-55604"]},"retained":false,"historicalAffected":[]}],"coverage":[]}