What happened
An improper authorization flaw (CWE-863) in the LaraDashboard MCP send-email tool lets an authenticated read-only user send arbitrary emails via the MCP surface (published 2026-11-02, CVSS 3.1 4.3 / CVSS 4.0 5.3). The tool fails to require a write/send permission, allowing token misuse for phishing or spam from the site's mailer.
Why it matters
This is an agentic/MCP authorization bypass: an MCP tool exposed to AI agents and API clients grants a user with a read-only permission the ability to send mail as the site. In an AI/MCP deployment that can be abused to phish org members, spoof internal mail, or abuse the trusted mailer reputation.
Attack vector
The send-email MCP tool is reachable by anyone holding a valid MCP token and does not verify a write/send permission, so a user with only email_template.view can mint an MCP token and call send-email with an arbitrary recipient, subject, and raw HTML body to deliver phishing or spam from the site's mailer.
Affected systems
LaraDashboard 1.4.0 through 1.4.8 (MCP send-email tool in app/Mcp/Tools/SendEmailTool.php); fixed in 1.4.9
Mitigation
Upgrade to LaraDashboard >= 1.4.9 (commit 5955d72) and enforce a proper send/email authorization on the MCP tool rather than only email_template.view.