Vendor
Modelcontextprotocol
48 known vulnerabilities in products by Modelcontextprotocol, 0 of them actively exploited (CISA KEV).
Key figures
48
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-49596 | MCP Inspector proxy server lacks authentication between the Inspector client and proxy | — | |
| Critical | CVE-2025-68145 | mcp-server-git has missing path validation when using --repository flag | 9.1 | |
| High | CVE-2025-68143 | Modelcontextprotocol Servers: Path Traversal | 8.8 | |
| High | CVE-2025-53366 | MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service | — | |
| High | CVE-2025-68144 | Modelcontextprotocol Servers: Argument Injection | 7.1 | |
| High | CVE-2026-109527 | Modelcontextprotocol Python-sdk: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-108395 | Modelcontextprotocol Io.modelcontextprotocol.sdk:mcp: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-67432 | Modelcontextprotocol Ruby-sdk: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-63128 | Modelcontextprotocol Rust-sdk: Missing Release of Memory after Effective Lifetime | 7.5 | |
| High | CVE-2026-108714 | MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket | 7.5 | |
| High | CVE-2026-111767 | MCP TypeScript SDK: Experimental tasks were not tied to the session that created them | 8.6 | |
| Medium | CVE-2026-53965 | MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service | — | |
| Medium | CVE-2026-59951 | Modelcontextprotocol Python-sdk: Missing Release of Resource after Effective Lifetime | — | |
| Medium | CVE-2026-64684 | RMCP: Custom HTTP headers leak to cross-origin redirect targets | 6.8 | |
| High | CVE-2025-58444 | Modelcontextprotocol Inspector: Improper Neutralization of Encoded URI Schemes in a Web Page | — | |
| High | CVE-2026-52869 | MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal | 7.1 | |
| High | CVE-2025-53109 | Modelcontextprotocol Servers: Link Following | — | |
| High | CVE-2026-67431 | MCP Ruby SDK: Ruby SSE Session Poisoning | — | |
| High | CVE-2026-104120 | Modelcontextprotocol Mcp-server-fetch: Server-Side Request Forgery (SSRF) | 7.3 | |
| High | CVE-2026-33946 | MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay | 5.9 | |
| High | CVE-2026-63127 | RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery | 8.2 | |
| High | CVE-2026-104850 | Modelcontextprotocol Typescript-sdk: Insufficient Verification of Data Authenticity | 7.5 | |
| Medium | CVE-2026-116685 | Modelcontextprotocol Python-sdk: Exposure of Sensitive Information to an Unauthorized Actor | 5.9 | |
| High | CVE-2026-34742 | Modelcontextprotocol Go-sdk: Initialization of a Resource with an Insecure Default | 8.1 | |
| Medium | CVE-2026-116686 | Modelcontextprotocol Python-sdk: Server-Side Request Forgery (SSRF) | 6.5 |
Products
| Python-sdk | 11 | 0 |
| Ruby-sdk | 6 | 0 |
| Servers | 6 | 0 |
| Registry | 5 | 0 |
| Rust-sdk | 4 | 0 |
| Typescript-sdk | 4 | 0 |
| Go-sdk | 3 | 0 |