CVE-2026-114123

Name of the Vulnerable Software and Affected Versions D365 F&O MCP Server versions prior to 1.11.0

Description The Azure one-click deployment defaults the apiKey parameter to an empty string, which is then passed to the App Service API KEY setting. When this key is empty or unset, the apiKeyAuth.ts middleware allows requests to pass without authentication, and the HTTP listener in index.ts binds to 0.0.0.0 by default. This configuration allows unauthenticated JSON-RPC requests to the /mcp endpoint. Even when MCP SERVER MODE is set to read-only, anonymous users can access tools such as search, get object info, batch get info, extension info, security info, find references, and find event handlers. This exposes proprietary X++ source snippets and metadata, including business logic, security-role and privilege structures, and labels from PackagesLocalDirectory.

Recommendations Update to version 1.11.0. Configure a non-empty API key during deployment. Implement network restrictions or upstream authentication to prevent unauthorized access to the /mcp endpoint.