CVE-2026-108698 - hyper-mcp through 0.8.3 OCI Plugin Signature Verification TOCTOU Race Condition
CVE ID :CVE-2026-108698 Published : Oct. 11, 2026, 2:17 p.m. | 1 hour, 13 minutes ago Description :hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load_wasm in src/wasm/oci.rs that verifies the Cosign signature of a separately resolved tag rather than the...