---
id: CVE-2026-28361
aliases:
  - GHSA-p9x3-w98f-7j3q
title: NocoDB Missing Ownership Validation in MCP Token Operations
summary: NocoDB Missing Ownership Validation in MCP Token Operations
severity: medium
cwe:
  - CWE-639
vendor: nocodb
product: nocodb
ecosystem: npm
affected:
  - nocodb <= 0.301.2
patched:
  - nocodb 0.301.3
published: '2026-03-02'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T22:42:12Z'
source: GHSA
sourceUrl: 'https://github.com/advisories/GHSA-p9x3-w98f-7j3q'
references:
  - url: 'https://github.com/nocodb/nocodb/security/advisories/GHSA-p9x3-w98f-7j3q'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-28361'
  - url: 'https://github.com/nocodb/nocodb/releases/tag/0.301.3'
  - url: >-
      https://github.com/nocodb/nocodb/commit/4e736ee40951c7b4f9760f372780e0712c44b9dd
  - url: 'https://github.com/advisories/GHSA-p9x3-w98f-7j3q'
tags:
  - ghsa
  - npm
epss: 0.00185
epssPercentile: 0.08229
ingestedAt: '2026-11-05T23:41:31.932Z'
---

## Overview

### Summary
The MCP token service did not validate token ownership, allowing a Creator within the same base to read, regenerate, or delete another user's MCP tokens if the token ID was known.

### Details
`McpTokenService.get()`, `regenerateToken()`, and `delete()` did not filter by `fk_user_id`. The analogous `ApiTokensService` correctly enforced ownership.

### Impact
Limited — requires Creator role and knowledge of target token ID. Primary risk is denial of service (invalidating tokens) and scoped token disclosure.

### Credit
This issue was reported by [@bugbunny-research](https://github.com/bugbunny-research) (bugbunny.ai).

## Affected packages

- `nocodb <= 0.301.2`

## Remediation

Upgrade to a patched release:

- `nocodb 0.301.3`