modelcontextprotocol rust-sdk vulnerabilities

Newest CVEs

• CVE-2026-64684

  RMCP: Custom HTTP headers leak to cross-origin redirect targets

  modelcontextprotocol · rust-sdk

  Medium6.8
• CVE-2026-63127

  RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery

  modelcontextprotocol · rust-sdk

  High8.2
• CVE-2026-63128

  RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

  modelcontextprotocol · rust-sdk

  High7.5
• CVE-2026-42559

  RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport

  modelcontextprotocol · rust-sdk

  High8.8