GHSA-76pc-mqxp-3rq5Published
Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-55156 · Microsoft / collected KEV context
cve-program · CVE-2026-55156
- https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-76pc-mqxp-3rq5
- https://github.com/ooples/token-optimizer-mcp/commit/b4ee96dac799cbfba0a9f9c17844ce9d613cbcc7
- https://github.com/ooples/token-optimizer-mcp/releases/tag/v5.1.0
euvd · EUVD-2026-88398
- https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-76pc-mqxp-3rq5
- https://github.com/ooples/token-optimizer-mcp/commit/b4ee96dac799cbfba0a9f9c17844ce9d613cbcc7
- https://github.com/ooples/token-optimizer-mcp/releases/tag/v5.1.0
nvd · CVE-2026-55156
- https://github.com/ooples/token-optimizer-mcp/commit/b4ee96dac799cbfba0a9f9c17844ce9d613cbcc7
- https://github.com/ooples/token-optimizer-mcp/releases/tag/v5.1.0
- https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-76pc-mqxp-3rq5
osv · GHSA-76pc-mqxp-3rq5
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.