{
 "id": "AIR-2026-1269",
 "slug": "cve-2026-48039-meta-ads-mcp-authentication-bypass-in-middlew",
 "title": "CVE-2026-48039: Meta Ads MCP authentication bypass in middleware",
 "summary": "An authentication flaw in Meta Ads MCP prior to version 1.0.109 forwards unauthenticated requests to downstream tool handlers without validation. Unauthenticated callers can invoke MCP tools and fall back to environment credentials.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling",
  "Meta"
 ],
 "products": [
  "Meta Ads MCP"
 ],
 "incident_date": "2026-08-07",
 "incident_date_precision": "day",
 "first_reported": "2026-08-07",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48039",
   "publisher": "NVD",
   "title": "CVE-2026-48039: Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads.",
   "published_at": "2026-08-07"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-48039",
  "mcp",
  "auth-bypass"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}