en
Model Context Protocol is an open protocol project for integrating AI applications with external data sources, tools, and systems. It provides a common protocol specification, documentation, SDKs, server ecosystem, registry, and developer tooling. The project operates as a global open-source community rather than a conventional commercial product vendor.
As of 10/22/2026, modelcontextprotocol recorded 17 security vulnerabilities in the last 90 days across 14 products, including 9 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, ruby-sdk had the most security vulnerabilities in the modelcontextprotocol ecosystem, with 5 vulnerabilities—approximately 29.41% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-111767MCP TypeScript SDK: Experimental tasks were not tied to the session that created themCVE-2026-109527Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodiesCVE-2026-108395Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodiesCVE-2026-59951MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource ExhaustionCVE-2026-108714MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-111767MCP TypeScript SDK: Experimental tasks were not tied to the session that created them | Exploitation statusNot exploited | FixYes |
| Affected producttypescript-sdk |
| Published10/20/2026 |
| SeverityHigh |
CVE-2026-109527Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies | Exploitation statusNot exploited | FixYes | Affected productpython-sdk | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-108395Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies | Exploitation statusNot exploited | FixYes | Affected productio.modelcontextprotocol.sdk:mcp | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-59951MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion | Exploitation statusNot exploited | FixYes | Affected productpython-sdk | Published10/14/2026 | SeverityMedium |
|---|
CVE-2026-108714MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket | Exploitation statusNot exploited | FixYes | Affected productkotlin-sdk | Published10/11/2026 | SeverityHigh |
|---|
CVE-2026-104850MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server | Exploitation statusNot exploited | FixNo | Affected producttypescript-sdk | Published10/06/2026 | SeverityHigh |
|---|
CVE-2026-104120modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery | Exploitation statusActively exploited | FixYes | Affected productmcp-server-fetch | Published10/02/2026 | SeverityMedium |
|---|
CVE-2026-64684RMCP: Custom HTTP headers leak to cross-origin redirect targets | Exploitation statusNot exploited | FixYes | Affected productrust-sdk | Published09/16/2026 | SeverityMedium |
|---|
CVE-2026-63127RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery | Exploitation statusActively exploited | FixYes | Affected productrust-sdk | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-63128RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service | Exploitation statusActively exploited | FixYes | Affected productrust-sdk | Published09/16/2026 | SeverityHigh |
|---|
45 Results | Page 1 of 5