CVE-2026-54547 Details
Description
Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in meta_ads_mcp/core/http_auth_integration.py rejects HTTP MCP requests only when both auth_token and pipeboard_token are absent, while extract_token_from_headers() does not recognize X-Pipeboard-Token as a primary credential. A network caller using the streamable-http transport can therefore send any X-Pipeboard-Token value, pass the guard without establishing authentication context, and cause get_auth_token() to fall back to the server operator's META_ACCESS_TOKEN. Subsequent MCP tools execute with the operator's Meta credentials and can read or modify the operator's Meta Ads data. Deployments using the default stdio transport or without META_ACCESS_TOKEN are not affected. This issue is fixed in version 1.0.115.
A vulnerability in Meta Ads MCP prior to version 1.0.115 allows for authentication bypass via the X-Pipeboard-Token header. The AuthInjectionMiddleware in the application fails to properly validate requests when both auth_token and pipeboard_token are absent. This oversight enables a network caller to send an arbitrary X-Pipeboard-Token value, bypass authentication checks, and access MCP tools using the server operator's Meta credentials. The vulnerability arises because the middleware does not recognize X-Pipeboard-Token as a primary authentication credential, allowing requests to be processed without proper authorization.
Users are advised to update to Meta Ads MCP version 1.0.115 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 15, 2026CISA-ADP
Assessed Sep 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-2v2f-mvfg-ph56 | CISA-ADP | AdvisoryExploitRemedyTechnical AnalysisVendor |
| https://github.com/pipeboard-co/meta-ads-mcp/commit/95e852793b7ff8604a8132e85d5facd08c91a36e | [email protected] | Source CodeVendor |
| https://github.com/pipeboard-co/meta-ads-mcp/pull/137 | [email protected] | Issue TrackingSource CodeVendor |
| https://github.com/pipeboard-co/meta-ads-mcp/releases/tag/1.0.115 | [email protected] | Release NotesVendor |
| https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-2v2f-mvfg-ph56 | [email protected] | AdvisoryExploitRemedyTechnical AnalysisVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Pipeboard Meta Ads MCP | <= 1.0.113 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 17, 2026 | CVE Modified | CISA-ADP |
| Sep 15, 2026 | New CVE Received | [email protected] |