PT-2026-127218

Name of the Vulnerable Software and Affected Versions Model Context Protocol Python SDK versions 1.8.0 through 1.29.1 Model Context Protocol Python SDK versions 2.0.0 through 2.1.1 Description Certain client paths in the SDK follow HTTP redirects to different origins, which can lead to the exposu...

PT-2026-127747

Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any host. If the configured MCP endpoint answered with a redirect to a different origin: - custom headers set on the client for example an X-API-Key credential were sent to that origin, an...

CVE-2026-92361

A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. The attack can be executed remotely. The pull request to fi...

CVE-2026-92361 ag-ui-protocol ag-ui SSE Client client.go resource consumption

A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. The attack can be executed remotely. The pull request to fi...

CVE-2026-92361

A remote resource consumption vulnerability affects the SSE Client component of ag-ui-protocol ag-ui 1.0 , specifically in the file sdks/community/go/pkg/client/sse/client.go. An attacker with low privileges can trigger excessive resource consumption over the network without user interaction, res...

CVE-2026-92361 ag-ui-protocol ag-ui SSE Client client.go resource consumption

A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. The attack can be executed remotely. The pull request to fi...

EUVD-2026-80725

A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. The attack can be executed remotely. The pull request to fi...

CVE-2026-92361 ag-ui-protocol ag-ui SSE Client client.go resource consumption

A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. The attack can be executed remotely. The pull request to fi...

CVE-2026-92361: Uncontrolled Resource Consumption

A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. The attack can be executed remotely. The pull request to fi...

PT-2026-93730

Name of the Vulnerable Software and Affected Versions ag-ui-protocol ag-ui version 1.0 Description A remote attack targeting the SSE Client component in the file sdks/community/go/pkg/client/sse/client.go can lead to excessive resource consumption. SSE Server-Sent Events is a mechanism that allow...