{"id":"CVE-2026-28361","aliases":["GHSA-p9x3-w98f-7j3q"],"title":"NocoDB Missing Ownership Validation in MCP Token Operations","summary":"NocoDB Missing Ownership Validation in MCP Token Operations","severity":"medium","cwe":["CWE-639"],"vendor":"nocodb","product":"nocodb","ecosystem":"npm","affected":["nocodb <= 0.301.2"],"patched":["nocodb 0.301.3"],"published":"2026-03-02","updated":"2026-11-05","sourceUpdated":"2026-11-05T22:42:12Z","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-p9x3-w98f-7j3q","references":[{"url":"https://github.com/nocodb/nocodb/security/advisories/GHSA-p9x3-w98f-7j3q"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28361"},{"url":"https://github.com/nocodb/nocodb/releases/tag/0.301.3"},{"url":"https://github.com/nocodb/nocodb/commit/4e736ee40951c7b4f9760f372780e0712c44b9dd"},{"url":"https://github.com/advisories/GHSA-p9x3-w98f-7j3q"}],"tags":["ghsa","npm"],"epss":0.00185,"epssPercentile":0.08229,"ingestedAt":"2026-11-05T23:41:31.932Z","slug":"CVE-2026-28361","body":"## Overview\n\n### Summary\nThe MCP token service did not validate token ownership, allowing a Creator within the same base to read, regenerate, or delete another user's MCP tokens if the token ID was known.\n\n### Details\n`McpTokenService.get()`, `regenerateToken()`, and `delete()` did not filter by `fk_user_id`. The analogous `ApiTokensService` correctly enforced ownership.\n\n### Impact\nLimited — requires Creator role and knowledge of target token ID. Primary risk is denial of service (invalidating tokens) and scoped token disclosure.\n\n### Credit\nThis issue was reported by [@bugbunny-research](https://github.com/bugbunny-research) (bugbunny.ai).\n\n## Affected packages\n\n- `nocodb <= 0.301.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `nocodb 0.301.3`","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":27.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}