CVE-2026-116686Medium 6.5Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas0.3%
CVE-2026-116685Medium 5.9Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies0.4%
CVE-2026-116684Medium 6.8Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server0.4%
CVE-2026-109527High 7.5Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies0.7%
CVE-2026-59951Medium 6.9MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion0.5%
CVE-2026-59950High 7.6MCP Python SDK: WebSocket server transport does not support Host/Origin validation0.2%
CVE-2026-52870High 7.6MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks0.4%
CVE-2026-52869High 7.1MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal0.5%
CVE-2025-66416High 7.6DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost0.5%
CVE-2025-53366High 8.7MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service9.8%
CVE-2025-53365High 8.7MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service0.4%