modelcontextprotocol vulnerabilities

Products

• python-sdk 11
• @modelcontextprotocol/sdk 9
• typescript-sdk 8
• ruby-sdk 6
• servers 6
• registry 5
• go-sdk 4
• rust-sdk 4
• server 4
• @modelcontextprotocol/inspector 3
• @modelcontextprotocol/server-filesystem 2
• client 2
• java-sdk 2
• @modelcontextprotocol/hono 1
• @modelcontextprotocol/node 1
• express 1
• io.modelcontextprotocol:kotlin-sdk 1
• io.modelcontextprotocol:kotlin-sdk-client 1
• io.modelcontextprotocol:kotlin-sdk-core 1
• io.modelcontextprotocol:kotlin-sdk-server 1
• io.modelcontextprotocol.sdk:mcp 1
• io.modelcontextprotocol.sdk:mcp-core 1
• mcp-server-everything 1
• mcp-server-fetch 1
• php-sdk 1
• server-legacy 1

Latest modelcontextprotocol CVEs

Newest publication first · page 3 of 3

1. CVE-2025-53366 MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service

   Published 2025-07-04

   High·CVSS 8.7 EPSS 9.8%

   The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability (500 errors)...

2. CVE-2025-53365 MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service

   Published 2025-07-04

   High·CVSS 8.7 EPSS 0.42%

   The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the se...

3. CVE-2025-53109 Model Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink Handling

   Published 2025-07-02

   High·CVSS 7.3 EPSS 0.77%

   Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 0.6...

4. CVE-2025-53110 Model Context Protocol Servers Vulnerable to Path Validation Bypass via Colliding Path Prefix

   Published 2025-07-02

   High·CVSS 7.3 EPSS 0.58%

   Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files in cases where the prefix matches an allowed directory. Users are advised to...

5. CVE-2025-49596 MCP Inspector proxy server lacks authentication between the Inspector client and proxy

   Published 2025-06-13

   Critical·CVSS 9.4 EPSS 39.9%

   The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP comman...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.