Evidence · DiggingBeagle record
OSV CVE-2026-108699: Hyper-MCP unsigned publisher identity restriction
- Source role
- primary disclosure
Evidence record
Claim-level citations (2)
- supportsHyper-MCP accepted any keyless signer for OCI WebAssembly plugins: CVE-2026-108699 describes cosign_verify_args accepting arbitrary signer identities and OIDC issuers in affected Hyper-MCP versions through 0.8.3.
Summary and Details: cosign_verify_args; signer and issuer matching
- supportsHyper-MCP accepted any keyless signer for OCI WebAssembly plugins: An adversary able to control the plugin image reference could sign malicious WebAssembly using a keyless certificate and run it with configured host, filesystem or environment capabilities.
Details: malicious signed plugin and capability scope