python-sdk

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of ServiceCVE-2025-53366modelcontextprotocol · CVSS 8.7 · 9.8% likely

   CWE-248

2. Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodiesCVE-2026-109527modelcontextprotocol · CVSS 7.5 · 0.7% likely

   CWE-770

3. DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on LocalhostCVE-2025-66416modelcontextprotocol · CVSS 7.6 · 0.5% likely

   CWE-1188

4. MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principalCVE-2026-52869modelcontextprotocol · CVSS 7.1 · 0.5% likely

   CWE-639

5. MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource ExhaustionCVE-2026-59951modelcontextprotocol · CVSS 6.9 · 0.5% likely

   CWE-400

6. MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of ServiceCVE-2025-53365modelcontextprotocol · CVSS 8.7 · 0.4% likely

   CWE-248

7. Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesCVE-2026-116685modelcontextprotocol · CVSS 5.9 · 0.4% likely

   CWE-200

8. MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasksCVE-2026-52870modelcontextprotocol · CVSS 7.6 · 0.4% likely

   CWE-862

9. Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverCVE-2026-116684modelcontextprotocol · CVSS 6.8 · 0.4% likely

   CWE-863

10. Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemasCVE-2026-116686modelcontextprotocol · CVSS 6.5 · 0.3% likely

    CWE-918

11. MCP Python SDK: WebSocket server transport does not support Host/Origin validationCVE-2026-59950modelcontextprotocol · CVSS 7.6 · 0.2% likely

    CWE-1385

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.