Vulnerabilities in modelcontextprotocol
53 resultsCVE-2026-33946HIGHMCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID ReplayEPSS 0.5%CVE-2026-34742HIGHModel Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on LocalhostEPSS 0.5%CVE-2026-44427NONEMCP Registry: Open RedirectEPSS 0.5%CVE-2026-59951MEDIUMMCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource ExhaustionEPSS 0.5%CVE-2025-53365HIGHMCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of ServiceEPSS 0.4%CVE-2026-111769MEDIUMModel Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodiesEPSS 0.4%CVE-2026-116685MEDIUMModel Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesEPSS 0.4%CVE-2026-52870HIGHMCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasksEPSS 0.4%CVE-2026-67430MEDIUMMCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize floodEPSS 0.4%CVE-2026-111770HIGHModel Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to anotherEPSS 0.4%CVE-2026-116684MEDIUMModel Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverEPSS 0.4%CVE-2026-67431HIGHMCP Ruby SDK: Ruby SSE Session PoisoningEPSS 0.4%CVE-2026-108714HIGHMCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocketEPSS 0.4%CVE-2026-27735MEDIUMmcp-server-git : Path traversal in git_add allows staging files outside repository boundariesEPSS 0.3%CVE-2026-111767HIGHMCP TypeScript SDK: Experimental tasks were not tied to the session that created themEPSS 0.3%CVE-2026-116686MEDIUMModel Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemasEPSS 0.3%CVE-2026-25536HIGH@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuseEPSS 0.3%CVE-2026-27896HIGHMCP Go SDK Vulnerable to Improper Handling of Case SensitivityEPSS 0.3%CVE-2026-104120MEDIUMmodelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgeryEPSS 0.3%CVE-2026-44430MEDIUMMCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlistEPSS 0.3%