Model Context Protocol MCP Python SDK server request forgery vulnerability

Versions 1.10.0 through 1.30.0 and 2.0.0 through 2.2.0 of the Model Context Protocol MCP Python SDK contain a server-side request forgery vulnerability. This vulnerability arises because ClientSession, ClientSessionGroup, and Client invoke the default JSON schema parser to validate the outputSche...

Model Context Protocol MCP Python SDK authorization issue vulnerability

Versions 1.10.0 through 1.30.0 and 2.0.0 through 2.2.0 of the Model Context Protocol MCP Python SDK contain an authorization issue vulnerability. This vulnerability arises because server-side Bearer authentication configured via the tokenverifier parameter in AuthSettings accepts valid tokens...

Model Context Protocol MCP Python SDK information disclosure vulnerability

Versions 1.8.0 through 1.30.0 and 2.0.0 through 2.2.0 of the Model Context Protocol MCP Python SDK contain an information disclosure vulnerability. This vulnerability arises because the streamablehttpclient, streamablehttpclient, SSEclient, ClientSessionGroup, OAuth, and createmcphttpclient clien...

CVE-2026-59951

A flaw was found in the Model Context Protocol MCP Python SDK. Stateful streamable HTTP servers fail to enforce idle session expiration or limits on active sessions, preventing terminated or rejected requests from releasing their resources. A remote attacker can exploit this issue by repeatedly...