NocoDB versions prior to 0.301.3 contain a vulnerability in the MCP token service where token ownership is not validated. This allows a user with the Creator role within the same base to read, regenerate, or delete another user's MCP tokens if they know the token ID. The issue affects the McpTokenService methods get(), regenerateToken(), and delete(), which do not filter by user ID, unlike the ApiTokensService. The primary impact is limited to denial of service by invalidating tokens and scoped token disclosure. A fix is available in version 0.301.3.