Threat database

CVE-2026-108699 is a high-severity vulnerability in hyper-mcp versions up to 0.8.3 where improper cryptographic signature verification allows attackers to load malicious WebAssembly plugins. The function cosign_verify_args() accepts any signer identity and OIDC issuer by default, enabling attackers with control over a plugin image reference to sign malicious images using free Sigstore keyless certificates. This leads to execution of plugins with host, filesystem, and environment capabilities configured in the target system.

CVE-2026-108698 is a high-severity vulnerability in hyper-mcp through version 0.8.3. It involves a time-of-check time-of-use (TOCTOU) race condition in the load_wasm function that leads to a signature verification bypass. The vulnerability allows attackers who control registry responses for a tag to serve an unsigned malicious manifest to the loader while presenting a signed manifest to the Cosign verifier. This results in execution of unsigned WebAssembly plugins with configured host capabilities.