CVE-2026-111767: high-severity vulnerability in modelcontextprotocol typescript-sdk
MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.6epss 0.3%
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. This issue has been patched in version 1.32.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected products
modelcontextprotocol · typescript-sdkRelated CVEs — modelcontextprotocol typescript-sdk
In the same product, most dangerous first.
CVE-2025-66414HIGHDNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on LocalhostEPSS 0.5%CVE-2026-25536HIGH@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuseEPSS 0.3%CVE-2026-104850HIGHMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP serverEPSS 0.2%