modelcontextprotocol Latest Vulnerabilities
Latest vulnerabilities published by modelcontextprotocol
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Server-Side Request Forgery Vulnerability in ModelContextProtocol's Fetch Tool
CVE-2026-104120ModelcontextprotocolMcp-server-fetch👾🟡6.9MEDIUMSecurity Flaw in Model Context Protocol Rust SDK Allows Token Replay Attacks
CVE-2026-64684ModelcontextprotocolRust-sdk6.8MEDIUMOAuth Implementation Flaw in RMCP Rust SDK Affects Model Context Protocol
CVE-2026-63127ModelcontextprotocolRust-sdk8.2HIGHVulnerability in Rust SDK's Streamable HTTP Server Affects Model Context Protocol Products
CVE-2026-63128ModelcontextprotocolRust-sdk7.5HIGHDenial of Service Vulnerability in MCP Kotlin SDK by Model Context Protocol
CVE-2026-53937ModelcontextprotocolIo.modelcontextprotoco...6.2MEDIUMMemory Exhaustion Vulnerability in MCP PHP SDK Affects Model Context Protocol
CVE-2026-53965ModelcontextprotocolPHP-sdk6.9MEDIUMSession ID Binding Issue in MCP Ruby SDK by Model Context Protocol
CVE-2026-67431ModelcontextprotocolRuby-sdk8.3HIGHSession Management Flaw in MCP Ruby SDK Affects Memory Management
CVE-2026-67430ModelcontextprotocolRuby-sdk5.3MEDIUMWebSocket Handshake Vulnerability in MCP Python SDK by Model Context Protocol
CVE-2026-59950ModelcontextprotocolPython-sdk7.6HIGHImproper Task Handling in Python SDK by Model Context Protocol
CVE-2026-52870ModelcontextprotocolPython-sdk7.6HIGHVulnerability in MCP Python SDK Affects JSON-RPC Message Security
CVE-2026-52869ModelcontextprotocolPython-sdk7.1HIGHImproper Token Validation in MCP Registry Affecting Multiple Deployments
CVE-2026-44428ModelcontextprotocolRegistry2.1LOWOpen Redirect Vulnerability in MCP Registry Affects Model Context Protocol
CVE-2026-44427ModelcontextprotocolRegistryNONEStored Cross-Site Scripting in MCP Registry by Model Context Protocol
CVE-2026-44429ModelcontextprotocolRegistry5.1MEDIUMVulnerability in MCP Registry Affects Network Security
CVE-2026-44430ModelcontextprotocolRegistry6.3MEDIUMImproper Ownership Validation in MCP Registry Affects Multiple Clients
CVE-2026-45781ModelcontextprotocolRegistry3.5LOWVulnerability in RMCP Rust SDK Allows DNS Rebinding Attacks on MCP Servers
CVE-2026-42559ModelcontextprotocolRust-sdk👾🟡8.8HIGHDNS Rebinding Vulnerability in MCP Java SDK by Model Context Protocol
CVE-2026-35568ModelcontextprotocolJava-sdk7.6HIGHDNS Rebinding Vulnerability in Go MCP SDK by Model Context Protocol
CVE-2026-34742ModelcontextprotocolGo-sdk7.6HIGHCORS Vulnerability in MCP Java SDK Affects Model Context Protocol Servers
CVE-2026-34237ModelcontextprotocolJava-sdk6.1MEDIUMSession Hijacking Vulnerability in Ruby SDK for Model Context Protocol
CVE-2026-33946ModelcontextprotocolRuby-sdk8.2HIGHCross-Site Request Forgery in Go MCP SDK from Model Context Protocol
CVE-2026-33252ModelcontextprotocolGo-sdk7.1HIGHCase Sensitivity Issue in Go MCP SDK by Model Context Protocol
CVE-2026-27896ModelcontextprotocolGo-sdk7HIGHInsecure File Path Handling in Model Context Protocol Servers
CVE-2026-27735ModelcontextprotocolServers6.4MEDIUMCross-Client Data Leak in MCP TypeScript SDK Version 1.10.0 to 1.25.3
CVE-2026-25536ModelcontextprotocolTypescript-sdk7.1HIGH