Evidence · DiggingBeagle record
Agent Router cross-route MCP session authorization
Advisory: authenticated MCP sessions could be restored through a route with weaker JWT authorization.
- Source role
- primary disclosure
Evidence record
Advisory: authenticated MCP sessions could be restored through a route with weaker JWT authorization.
Claim-level citations (1)
- supportsAn MCP session restored through a weaker route retained a privileged backend: An Agent Router MCP session ID could restore a route established with stronger OAuth requirements while the request arrived through a different weaker route and unverified JWT-scope claims.
Summary; Proof of concept; Fixed behavior