OSV CVE-2026-108698: Hyper-MCP OCI verification time-of-check race

Evidence record

Read the original source ↗

Claim-level citations (2)

• supportsHyper-MCP checks a different OCI tag resolution from the plugin it loads: CVE-2026-108698 describes load_wasm verifying a separate resolution of an OCI tag instead of the actual manifest previously retrieved for loading.

  Details: load_wasm; Cosign separate tag resolution

• supportsHyper-MCP checks a different OCI tag resolution from the plugin it loads: A party controlling registry tag responses could give an unsigned plugin to the loader and a signed manifest to Cosign, so verified identity need not bind to the executed WebAssembly bytes.

  Details: unsigned malicious manifest and signed tag returned to Cosign