CVE-2026-116685

A flaw was found in the Model Context Protocol MCP Python SDK. When handling HTTP redirects, client connections follow redirects to different origins while improperly forwarding caller-supplied credential headers and request bodies. A remote attacker capable of influencing a trusted server's...