CyberRota Analysis
AI-GeneratedThe Telnyx MCP server is vulnerable due to its HTTP transport being exposed on all interfaces without requiring caller credentials, allowing unauthenticated access. This flaw enables attackers to initialize requests and potentially access sensitive stored credentials, including the Telnyx API key and client secret, leading to unauthorized actions on the server. Organizations using the Telnyx MCP server should prioritize addressing this vulnerability to mitigate the risk of credential exposure and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they were absent, so a request without any credential completed initialisation and dispatched tools. Dispatch forwarded the server's own stored credentials, the Telnyx API key and client secret together with the code-execution key, to the upstream endpoint, so an unauthenticated caller able to reach the port acted with them. The current code defaults the host to loopback, requires a server API key, and enforces it in middleware.