Executive Summary
HashiCorp, Veeam and Django patched 11 flaws, including a CVSS 10.0 cross-tenant bug in Terraform MCP Server reusing one user's Terraform token for later users.
What Happened
HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django. The three most serious: An unauthenticated flaw in Veeam's console that hands over a managed agent's credentials, rated 9.5 A cross-tenant flaw in HashiCorp's MCP server that lets one user's Terraform token be reused for later users'
Affected Products
- Terraform MCP Server
- Veeam Service Provider Console
- Django
Vulnerability / Attack Technique
Cross-tenant token reuse in an MCP server
Technical Mechanism
As reported, the MCP server reused credentials across users.
AI Security Category
LLM02:2025 Sensitive Information Disclosure
Part of the MCP Security topic.
Relevant Frameworks
RealGround Analysis
Shared MCP servers must isolate each user's credentials. RealGround analysis: prefer per-user MCP instances for infrastructure tools.
Recommended Controls
- Update Terraform MCP Server
- Rotate Terraform tokens used with it
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.