modelcontextprotocol vulnerabilities

CVEs per yearBy the year they were published

1. 202511
2. 202642

Newest CVEs

• CVE-2026-111770

  Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another

  modelcontextprotocol · typescript-sdk

  High7.7
• CVE-2026-111768

  Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation

  modelcontextprotocol · typescript-sdk

  High7.5
• CVE-2026-111769

  Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

  modelcontextprotocol · typescript-sdk

  Medium6.5
• CVE-2026-111771

  Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service

  modelcontextprotocol · typescript-sdk

  Medium6.8
• CVE-2026-119025

  open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

  sindresorhus · open

  High7.7
• CVE-2026-116686

  Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

  modelcontextprotocol · python-sdk

  Medium6.5
• CVE-2026-116685

  Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

  modelcontextprotocol · python-sdk

  Medium5.9
• CVE-2026-116684

  Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

  modelcontextprotocol · python-sdk

  Medium6.8
• CVE-2026-111767

  MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

  modelcontextprotocol · typescript-sdk

  High8.6
• CVE-2026-109527

  Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies

  modelcontextprotocol · python-sdk

  High7.5