Team-telnyx vulnerabilities
We track 2 vulnerabilities in Team-telnyx products across 2 products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on August 27, 2026.
2vulnerabilities
1critical
1high
1exploited
8.9average CVSS score
Latest Team-telnyx vulnerabilities
- 9.1 Critical severity
telnyx-mcp: Missing Authentication for Critical Functionality
The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a
- 8.8 High severity
Aquasecurity Trivy Embedded Malicious Code Exploited
Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in