Skip to content
OpenAdvisories

Product · modelcontextprotocol

rust-sdk

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-64684

    RMCP: Custom HTTP headers leak to cross-origin redirect targets

    RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.1.0, the rmcp crate's StreamableHttpClientTransport in crates/rmcp/src/transport/common/reqwest/streamable_http_client.rs builds its default_http_client with reqwest's automatic redirect …

    modelcontextprotocol rust-sdk rmcp crates.io