GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
6965
Downloads
12.9M
Verified
6965
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-115477: Mcp Hitl Elicit State Promoted Without Confirm Answercve-2026-115477-mcp-hitl-elicit-state-promoted-without-confirm-answer

A client-echoed MCP elicitation `requestState` is promoted into the caller context (`elicitState`) on authenticity verification alone. That state is minted BEFORE the `elicitation/create` confirm leg is asked and is delivered back unchanged for accept, decline, cancel and malformed/omitted answers, so a verified echo proves only that the resubmission belongs

TSCVE-2026-115477CWE-285CWE-863
by Provallyupdated 2026-10-27Apache-2.0
450 direct45 via packs
87
All matching rules loaded.