Skip to content
OpenAdvisories

Vendor

modelcontextprotocol

53 known vulnerabilities.

Products

python-sdk 11 typescript-sdk 8 ruby-sdk 6 servers 6 registry 5 rust-sdk 4 inspector 3 server 3 sdk 3 go-sdk 3 java-sdk 2 kotlin-sdk 1 mcp-server-fetch 1 mcp-server-everything 1 io.modelcontextprotocol:kotlin-sdk 1 io.modelcontextprotocol:kotlin-sdk-client 1 io.modelcontextprotocol:kotlin-sdk-core 1 io.modelcontextprotocol:kotlin-sdk-server 1 php-sdk 1 io.modelcontextprotocol.sdk:mcp 1 io.modelcontextprotocol.sdk:mcp-core 1 client 1 express 1 server-legacy 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.7
    CVE-2026-111770 Public exploit

    Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another

    The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 2.0.0 until 2.3.0 in @modelcontextprotocol/server, applications that shared one stateless HTTP transport or one McpServer or Se…

    modelcontextprotocol typescript-sdk server @modelcontextprotocol/server npm
  • High 7.5
    CVE-2026-119025 Public exploit

    open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

    open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint valu…

    modelcontextprotocol sindresorhus anomalyco inspector Ubuntu
  • High 7.5
    CVE-2026-104850 Public exploit

    MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

    MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide which authoriza…

    modelcontextprotocol typescript-sdk @modelcontextprotocol/sdk @modelcontextprotocol/client npm
  • High 8.8
    CVE-2026-42559 Public exploit

    RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport

    RMCP is an official Rust SDK for the Model Context Protocol. Prior to version 1.4.0, the rmcp crate's Streamable HTTP server transport (crates/rmcp/src/transport/streamable_http_server/) did not validate the incoming Host header. This allowed a malicious publ…

    modelcontextprotocol rust-sdk rmcp dynoxide-rs npm crates.io
  • Critical 9.4
    CVE-2025-49596 Public exploit EPSS 44%

    MCP Inspector proxy server lacks authentication between the Inspector client and proxy

    The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests…

    modelcontextprotocol inspector @modelcontextprotocol/inspector npm