CVE-2026-108395: Allocation of Resources Without Limits or Throttling

The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mcp artifact, from 0.13.0 through 0.18.3 and 1.0.0 through 1.1.3 in io.modelcontextprotocol.sdk:mcp-core, and from...

PT-2026-114020

Name of the Vulnerable Software and Affected Versions mcp versions prior to 1.29.1 mcp versions 2.0.0a1 through 2.0.1 Description The Streamable HTTP session manager, SSE message endpoint, and OAuth authorization-server routes buffer complete HTTP request bodies without enforcing a maximum size. ...

PT-2026-114013

The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mcp artifact, from 0.13.0 through 0.18.3 and 1.0.0 through 1.1.3 in io.modelcontextprotocol.sdk:mcp-core, and from...

CVE-2026-77361: Improper Link Resolution Before File Access

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list ACL checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault symlink under an allowed glob that resolves into a denied...

PT-2026-111606

Name of the Vulnerable Software and Affected Versions obsidian-tc versions prior to 1.3.1 Description Read access-control list ACL checks use a lexical vault-relative path, whereas containment checks use the resolved path. This discrepancy allows an in-vault symlink located under an allowed glob ...

CVE-2026-77366

The obsidian-tc Model Context Protocol server is vulnerable to an authorization bypass in versions prior to 1.3.1 . The flaw occurs because tool dispatch fails to verify that the caller-controlled input.vault value matches the vault bound to the caller, compounded by a lack of vault claims in the...

ida-pro-mcp

IDA Pro MCP !IMPORTANT Consiglio invece di usare l'Official Hex-Rays IDA MCP Server! Consulta il post di annuncio sul blog per maggiori informazioni. Semplice MCP Server per consentire il vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 I...

inspector

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides four ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

vulnerable-mcp-servers-lab

Laboratorio di server MCP vulnerabili Questo repository contiene implementazioni volutamente vulnerabili di server Model Context Protocol MCP sia locali che remoti. Ogni server risiede nella propria cartella e include un README.md dedicato con tutti i dettagli su cosa fa , come eseguirlo e come...

Next.js has information disclosure in development server's Model Context Protocol endpoint

The Next.js development server next dev exposes a Model Context Protocol endpoint that does not verify which website a request originates from, allowing a malicious website visited by the developer to read sensitive development data — including the project's location on disk, source code snippets...

GHSA-39W2-RJM5-CHCV Next.js has information disclosure in development server's Model Context Protocol endpoint

The Next.js development server next dev exposes a Model Context Protocol endpoint that does not verify which website a request originates from, allowing a malicious website visited by the developer to read sensitive development data — including the project's location on disk, source code snippets...

NPM: Next.js has information disclosure in development server's Model Context Protocol endpoint

NPM: Next.js has information disclosure in development server's Model Context Protocol endpoint vulnerability discovered by ? in WordPress Npm next versions = 16.0.0, 16.3.8...

EUVD-2026-91667

Next.js has information disclosure in development server's Model Context Protocol endpoint...

EUVD-2026-91673

Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass...

EUVD-2026-92800

Langflow: IP Spoofing Bypass via X-Forwarded-For Allowing Remote Configuration Write...

CVE-2026-104850

A flaw was found in the Model Context Protocol MCP TypeScript SDK. A malicious or compromised MCP server can trigger an information disclosure vulnerability by specifying an arbitrary authorization server in its metadata. Because the client implementation fails to bind stored credentials to their...

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

In 2024, MCP Model Context Protocol set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterprises plugged them into agent workflows. The ecosystem around it fell short...

CVE-2026-105741

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...

CVE-2026-105741 Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...

CVE-2026-105741 Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...