{"id":"EUVD-2026-30493","enisaUuid":"0de79554-12be-32d7-bfb3-06bebcc9b9f3","description":"The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the client-side and server-side GitHub OIDC flow is bound only to a global audience string, not to the specific registry instance being targeted. On the client side, the publisher always appends audience\u003dmcp-registry when requesting the GitHub Actions ID token, regardless of the selected --registry URL. On the server side, the exchange endpoint validates only that same fixed audience and then derives publish permissions directly from repository_owner. As a result, a token legitimately obtained while interacting with one registry deployment remains acceptable to any other deployment that shares the same code and audience string. This vulnerability is fixed in 1.7.6.","datePublished":"May 14, 2026, 9:09:10 PM","dateUpdated":"May 15, 2026, 2:22:18 PM","baseScore":2.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N","references":"https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-95c3-6vvw-4mrq\n","aliases":"CVE-2026-44428\nGHSA-95c3-6vvw-4mrq\n","assigner":"GitHub_M","epss":0.22,"enisaIdProduct":[{"id":"4d865c0c-f972-3889-b8c4-70210ddc48ed","product":{"name":"registry","vendor":{"name":"modelcontextprotocol"}},"product_version":"\u003c 1.7.6"}],"enisaIdVendor":[{"id":"9493a9e9-22b0-3b47-90f8-9c13caddfd2c","vendor":{"name":"modelcontextprotocol"}}],"enisaIdVulnerability":[{"id":"72e7cdc5-6686-3dac-b688-e43138816d22","vulnerability":{"id":"CVE-2026-44428","description":"The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the client-side and server-side GitHub OIDC flow is bound only to a global audience string, not to the specific registry instance being targeted. On the client side, the publisher always appends audience\u003dmcp-registry when requesting the GitHub Actions ID token, regardless of the selected --registry URL. On the server side, the exchange endpoint validates only that same fixed audience and then derives publish permissions directly from repository_owner. As a result, a token legitimately obtained while interacting with one registry deployment remains acceptable to any other deployment that shares the same code and audience string. This vulnerability is fixed in 1.7.6.","datePublished":"May 14, 2026, 9:09:10 PM","dateUpdated":"May 15, 2026, 2:22:18 PM","status":"PUBLISHED","baseScore":2.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N","references":"https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-95c3-6vvw-4mrq\n","enisa_id":"EUVD-2026-30493\n","assigner":"GitHub_M","epss":0.22,"dataProcessed":"Oct 28, 2026, 7:17:27 AM","vulnerabilityProduct":[{"id":"43acb7f4-99b4-35a8-b3b4-7d65740f338e","product":{"name":"registry","vendor":{"name":"modelcontextprotocol"}},"product_version":"\u003c 1.7.6"}],"vulnerabilityVendor":[{"id":"55e209c0-13c1-301d-9733-ce530b2c2965","vendor":{"name":"modelcontextprotocol"}}]}},{"id":"896f477e-b059-328f-a044-4a970f5a612b","vulnerability":{"id":"GHSA-95c3-6vvw-4mrq","description":"MCP Registry\u0027s GitHub OIDC tokens are replayable across registry deployments due to shared audience","datePublished":"May 8, 2026, 5:06:22 PM","dateUpdated":"May 15, 2026, 11:47:13 PM","baseScore":0.0,"references":"https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-95c3-6vvw-4mrq\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44428\nhttps://github.com/modelcontextprotocol/registry/pull/1229\nhttps://github.com/modelcontextprotocol/registry/commit/3f89fc2b1fb34fd49f3c0e1b39e964a5c67b613f\nhttps://github.com/modelcontextprotocol/registry\nhttps://github.com/modelcontextprotocol/registry/releases/tag/v1.7.6\n","enisa_id":"EUVD-2026-30493\n","aliases":"GHSA-95c3-6vvw-4mrq\nCVE-2026-44428\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}