ROOT-APP-NPM-CVE-2026-104850 CVE-2026-104850 in @modelcontextprotocol/sdk - Patched by Root

Root has patched CVE-2026-104850 in the @modelcontextprotocol/sdk package for Root:npm. Multiple fixed versions available...

CLSA-2026-1791839313 TuxCare security update for @modelcontextprotocol/sdk (1 CVE)

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.26.0-tuxcare.1...

CLSA-2026-1791835900 TuxCare security update for @modelcontextprotocol/sdk (1 CVE)

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.29.0-tuxcare.1...

CLSA-2026-1791679180 TuxCare security update for @modelcontextprotocol/sdk (1 CVE)

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.30.0-tuxcare.1...

CLSA-2026-1791626582 TuxCare security update for @modelcontextprotocol/sdk (1 CVE)

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.30.1-tuxcare.1...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +5688 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/sdk (>=1.12.0, <=1.30.1)

@modelcontextprotocol/sdk NPM version =1.12.0, =0.3.3, =1.0.0, =0.2.0, =1.14.1, =1.0.0, =0.1.3, =0.1.8, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =0.2.0, =8.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-104850 Source advisory: MEND:CVE-2026-104850...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +563 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/client (>=2.0.0, <=2.1.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.1.0, =0.7.0, =0.7.0, =0.0.0-beta-20260819155526, =1.1.0-nightly-20260831181857 and more Source cves: CVE-2026-104850 Source advisory: MEND:CVE-2026-104850...

CVE-2026-104850 MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide which authorization server received the client's OAut...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +5688 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/sdk (>=1.12.0, <=1.30.1)

@modelcontextprotocol/sdk NPM version =1.12.0, =0.3.3, =1.0.0, =0.2.0, =1.14.1, =1.0.0, =0.1.3, =0.1.8, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =0.2.0, =8.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-104850 Source advisory: OSV:GHSA-6QXP-VCCF-F47H...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +563 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/client (>=2.0.0, <=2.1.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.1.0, =0.7.0, =0.7.0, =0.0.0-beta-20260819155526, =1.1.0-nightly-20260831181857 and more Source cves: CVE-2026-104850 Source advisory: OSV:GHSA-6QXP-VCCF-F47H...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +5688 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/sdk (>=1.12.0, <=1.30.1)

@modelcontextprotocol/sdk NPM version =1.12.0, =0.3.3, =1.0.0, =0.2.0, =1.14.1, =1.0.0, =0.1.3, =0.1.8, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =0.2.0, =8.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-104850 Source advisory: GHSA-6QXP-VCCF-F47H...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +563 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/client (>=2.0.0, <=2.1.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.1.0, =0.7.0, =0.7.0, =0.0.0-beta-20260819155526, =1.1.0-nightly-20260831181857 and more Source cves: CVE-2026-104850 Source advisory: GHSA-6QXP-VCCF-F47H...

1st-pi (>=0.1.0, <=0.1.1), @0pvalencia/academic-linter-mcp (>=0.1.0, <=0.1.1) +1460 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/core (>=2.0.0, <=2.1.0)

@modelcontextprotocol/core NPM version =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.38.0, =1.3.3, =1.1.0, =2026.925.1, =0.2.0, =0.2.6 and more Source cves: CVE-2026-104850 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLCORE-20579858...

@1mcp/agent (>=0.38.0, <=0.39.0-beta.3), @3ngram/server (>=1.1.0, <=1.8.5) +72 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/server-legacy (>=2.0.0, <=2.1.0)

@modelcontextprotocol/server-legacy NPM version =2.0.0, =0.38.0, =1.1.0, =0.3.8, =0.5.0, =2.0.0, =0.59.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =3.1.0 and more Source cves: CVE-2026-104850 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLSERVERLEGACY-20579867...

Insufficiently Protected Credentials

Overview @modelcontextprotocol/client is a Model Context Protocol implementation for TypeScript - Client package Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the fetchToken and discardIfIssuerMismatch functions in the OAuth client authentication flo...

Insufficiently Protected Credentials

Overview @modelcontextprotocol/core is a Model Context Protocol for TypeScript — public Zod schemas spec + OAuth/OpenID Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the fetchToken and discardIfIssuerMismatch functions in the OAuth client...

Insufficiently Protected Credentials

Overview @modelcontextprotocol/sdk is a Model Context Protocol implementation for TypeScript Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the fetchToken and discardIfIssuerMismatch functions in the OAuth client authentication flow, where the SEP-235...

PT-2026-106775

Name of the Vulnerable Software and Affected Versions @modelcontextprotocol/sdk versions 1.12.0 through 1.30.1 @modelcontextprotocol/client versions 2.0.0 through 2.1.0 Description The SDK's OAuth client support allows an MCP server to determine which authorization server receives the client's...

CVE-2026-104850: Insufficient Verification of Data Authenticity

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide which authorization server received the client's OAut...

GHSA-C9XM-49CP-XCR9 rmcp OAuth client fetches server-controlled resource_metadata URLs

Summary The rmcp OAuth client accepts a server-controlled resourcemetadata= URL from the WWW-Authenticate header and fetches it without same-origin or private-network validation. An attacker-controlled MCP server can return a 401 WWW-Authenticate: Bearer resourcemetadata="..." header pointing at ...