Vulnerability Description
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plaintext application logs without redaction. Attackers with access to application stdout or centralized logging systems can capture base64-encoded credentials to replay MCP requests and access project analytics.
CVSS Score
LOW
Related Weaknesses (CWE)
References
- https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-8wx6-g25r-29
- https://www.vulncheck.com/advisories/openpanel-mcp-authentication-token-in-query
FAQ
What is CVE-2026-93982?
CVE-2026-93982 is a vulnerability with a CVSS score of 3.3 (LOW). OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plaintext application logs without redaction. Attackers with access to application st...
How severe is CVE-2026-93982?
CVE-2026-93982 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-93982?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.