{"id":"CVE-2026-103068","published":"2026-10-01T15:17:26.037","lastModified":"2026-10-01T20:31:55.537","description":"Subscriber Privilege Escalation in ByteCoreStack &#8211; MCP Connector for AI Tools <= 1.2.2 versions.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-266"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/bcs-mcp-manager/vulnerability/wordpress-bytecorestack-mcp-connector-for-ai-tools-plugin-1-2-2-privilege-escalation-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This flaw allows subscribers to escalate their privileges, potentially leading to unauthorized access and control over the system. It matters because it can be exploited by malicious actors to gain higher permissions without proper authorization.","exploitability":"Exploitation is moderately difficult and requires the attacker to be a subscriber. Precondition is the presence of the vulnerable version of ByteCoreStack MCP Connector for AI Tools.","blast_radius":"If exploited, the impact could be severe, as it allows for privilege escalation, potentially leading to full system compromise.","remediation":"Upgrade to ByteCoreStack MCP Connector for AI Tools version 1.2.3 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","subscriber","security"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-03T08:52:43.573Z"}}