CVE-2026-31841

MEDIUM

6.5

Descricao

Hyperterse is a tool-first MCP framework for building AI-ready backend surfaces from declarative config. Prior to v2.2.0, the search tool allows LLMs to search for tools using natural language. While returning results, Hyperterse also returned the raw SQL queries, exposing statements which were supposed to be executed under the hood, and protected from being displayed publicly. This issue has been fixed as of v2.2.0.

Detalhes CVE

Pontuacao CVSS v3.16.5

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado3/12/2026

Ultima modificacao3/19/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

hyperterse:hyperterse

Fraquezas (CWE)

CWE-433

Referencias

https://github.com/hyperterse/hyperterse/releases/tag/v2.2.0(security-advisories@github.com)

https://github.com/hyperterse/hyperterse/security/advisories/GHSA-92gp-jfgx-9qpv(security-advisories@github.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.