All vulnerabilities

CVE-2026-81098

Telnyx MCP Server through 6.83.0: missing authentication on Streamable HTTP transport

criticalCVSS 9.3CWE-306

Vendor

Telnyx

Package

telnyx-mcp npm

Affected

<= 6.83.0

Disclosed

2026-08-27

Credit

Avishai Gonen

auth-bypassmcp

Published advisory