CVE-2026-55604CWE-639

@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key

High · published July 9, 2026

CVSS v3.1
8.6
EPSS
0%
Percentile
30.0
In the wild
Unconfirmed
What it is

DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.7.0, the process-global `SessionStore` accepts caller-supplied `session_id` values without binding them to any authenticated principal or transport session. An attacker can enumerate active session IDs via `deepseek_sessions`, then reuse a victim-controlled `session_id` in `deepseek_chat` to retrieve and continue the victim's conversation context. Version 1.7.0 contains a patch.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00372 · 30.0th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-07-09T21:13Z
EPSS history
Timeline
  • 09 JUL 21:13Z
    @arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key
    cvelistv5