modelcontextprotocol vulnerabilities

CVEs per yearBy the year they were published

1. 202511
2. 202638

Newest CVEs

• CVE-2026-119025

  open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

  sindresorhus · open

  High7.7
• CVE-2026-116686

  Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

  modelcontextprotocol · python-sdk

  Medium6.5
• CVE-2026-116685

  Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

  modelcontextprotocol · python-sdk

  Medium5.9
• CVE-2026-116684

  Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

  modelcontextprotocol · python-sdk

  Medium6.8
• CVE-2026-111767

  MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

  modelcontextprotocol · typescript-sdk

  High8.6
• CVE-2026-109527

  Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies

  modelcontextprotocol · python-sdk

  High7.5
• CVE-2026-108395

  Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies

  modelcontextprotocol · io.modelcontextprotocol.sdk:mcp

  High7.5
• CVE-2026-59951

  MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion

  modelcontextprotocol · python-sdk

  Medium6.9
• CVE-2026-108714

  MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket

  modelcontextprotocol · kotlin-sdk

  High8.7
• CVE-2026-104850

  MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

  modelcontextprotocol · typescript-sdk

  High7.5