CVE Tools
Track your stack

Modelcontextprotocol

13 CVEs tracked since 2025. Since Dec 2025, none of them reached CISA KEV.

Modelcontextprotocol CVEs per month

Dec 2025 to Jul 2026. Point at a month, or focus the strip and use the arrow keys.
Modelcontextprotocol CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-1250
2026-01null or fewer
2026-02null or fewer
2026-03null or fewer
2026-04null or fewer
2026-05null or fewer
2026-06null or fewer
2026-0780

Products

The products that kept showing up in Modelcontextprotocol's monthly top three, with their CVEs summed over those months.

  1. Ruby-sdk51 month
  2. Python-sdk42 months
  3. Servers31 month
  4. Typescript-sdk11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Modelcontextprotocol.

  1. CVE-2026-64684RMCP: Custom HTTP headers leak to cross-origin redirect targets6.8
  2. CVE-2026-63127RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery8.2
  3. CVE-2026-63128RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service7.5
  4. CVE-2026-53937MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)6.2
  5. CVE-2026-53965MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service—
  6. CVE-2026-67432MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport7.5
  7. CVE-2026-67431MCP Ruby SDK: Ruby SSE Session Poisoning—
  8. CVE-2026-63119MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)6.2
  9. CVE-2026-67430MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize flood5.3
  10. CVE-2026-63118MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection—
  11. CVE-2026-59950MCP Python SDK: WebSocket server transport does not support Host/Origin validation8.1
  12. CVE-2026-52870MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks7.6
  13. CVE-2026-52869MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal7.1
  14. CVE-2026-44428MCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audience4.7
  15. CVE-2026-44427MCP Registry: Open Redirect—

The record

Peak rank
#167 in Jul 2026
Busiest month shown
Jul 2026, 8 CVEs
Months with a KEV entry
0 since Dec 2025
Monthly snapshots
2 since 2025
Modelcontextprotocol's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store