HashiCorp Patches Critical CVSS 10.0 Cross-Tenant Credential Bug in Terraform MCP Server
A maximum-severity flaw let one user's Terraform token be reused for other users' requests in stateless HTTP mode; two related bugs also patched in version 1.1.0.