Access Control

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another serviceCVE-2026-111771modelcontextprotocol · CVSS 6.8 · 0.5% likely

   CWE-863

2. MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasksCVE-2026-52870modelcontextprotocol · CVSS 7.6 · 0.4% likely

   CWE-862

3. Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverCVE-2026-116684modelcontextprotocol · CVSS 6.8 · 0.4% likely

   CWE-863

4. MCP Ruby SDK: Ruby SSE Session PoisoningCVE-2026-67431modelcontextprotocol · CVSS 8.3 · 0.4% likely

   CWE-284

5. RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transportCVE-2026-42559modelcontextprotocol · CVSS 8.8 · 0.3% likely

   CWE-346

6. MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protectionCVE-2026-63118modelcontextprotocol · CVSS 6.9 · 0.2% likely

   CWE-346

7. MCP Python SDK: WebSocket server transport does not support Host/Origin validationCVE-2026-59950modelcontextprotocol · CVSS 7.6 · 0.2% likely

   CWE-1385

8. MCP Java-SDK has a DNS Rebinding VulnerabilityCVE-2026-35568modelcontextprotocol · CVSS 7.6 · 0.2% likely

   CWE-346

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.