Modelcontextprotocol vulnerabilities
53 CVEs and advisories name Modelcontextprotocol as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-44429MCP Registry: Stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl`
- CVE-2026-44430MCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist
- CVE-2026-45781MCP Registry: OCI ownership validation fails open on upstream rate limits, allowing attacker-controlled package claims
- CVE-2026-42559RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport
- CVE-2026-35568MCP Java-SDK has a DNS Rebinding Vulnerability
- CVE-2026-34742Model Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhost
- CVE-2026-34237MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)
- CVE-2026-33946MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay
- CVE-2026-33252MCP Go SDK Allows Cross-Site Tool Execution for HTTP Servers without Authorizatrion
- CVE-2026-27896MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity
- CVE-2026-27735mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
- CVE-2026-25536@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
- CVE-2025-68145mcp-server-git has missing path validation when using --repository flag
- CVE-2025-68144mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files
- CVE-2025-68143mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
- CVE-2025-66416DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost
- CVE-2025-66414DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost
- CVE-2025-58444MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server
- CVE-2025-53366MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service
- CVE-2025-53365MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service
- CVE-2025-53109Model Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink Handling
- CVE-2025-53110Model Context Protocol Servers Vulnerable to Path Validation Bypass via Colliding Path Prefix
- CVE-2025-49596MCP Inspector proxy server lacks authentication between the Inspector client and proxy