Skip to content
OpenAdvisories

Product · modelcontextprotocol

java-sdk

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Feed

  • High 7.6
    CVE-2026-35568

    MCP Java-SDK has a DNS Rebinding Vulnerability

    MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerability. This vulnerability allows an attacker to access a locally or network-private java-sdk MCP server via a v…

    modelcontextprotocol java-sdk io.modelcontextprotocol.sdk:mcp-core Maven
  • Medium 6.1
    CVE-2026-34237

    MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)

    MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 0.83.0, 1.0.1, and 1.1.1, there is a hardcoded wildcard CORS vulnerability. This issue has been patched in versions 0.83.0, 1.0.1, and 1.1.1.

    modelcontextprotocol java-sdk io.modelcontextprotocol.sdk:mcp-core Maven