Skip to content
OpenAdvisories

Product · oatpp

oatpp-mcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2025-6515

    Reuse of session IDs in oatpp-mcp leads to session hijacking and prompt hijacking by remote attackers

    The MCP SSE endpoint in oatpp-mcp returns an instance pointer as the session ID, which is not unique nor cryptographically secure. This allows network attackers with access to the oatpp-mcp server to guess future session IDs and hijack legitimate client MCP s…

    oatpp oatpp-mcp