CVE-2026-59563 — HMAC Confirmation Token Unbinding in zscaler-mcp-server
Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to repl…
Published: 2026-09-28 · CVSS: 4.6 · CVSS 3.1
Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7