Management Planes Are Exposing the Keys Themselves
These flaws break the trust boundary in the management layer. A tenant request can inherit the wrong Terraform token, a console can hand out a managed agent’s credentials, and a GeoDjango lookup can turn staff access into file write or code execution on some setups.
HashiCorp fixed CVE-2026-16498 in Terraform MCP Server 1.1.0 or later. It affects streamable-HTTP deployments, where one user’s token can be reused in later users’ requests. Veeam fixed the credential-exposure bug in Service Provider Console 9.3.0.35057, and Django fixed CVE-2026-15307 in 6.0.8 and 5.2.17 for GeoDjango admin views tied to models with spatial fields.
The shared problem is not just a bad request. It is a control plane that can start acting as the wrong principal. If a tenant token, agent credential, or staff session was already exposed, patching closes the flaw but does not erase the access it already handed out.