Plango
Get Plango

For developers

Mac security

← AI agent vulnerabilities

CVE-2026-111767

MCP TypeScript SDK

8.6
Severity
High
Published
October 20, 2026
Last modified
October 20, 2026

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. This issue has been patched in version 1.32.0.

CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Weakness

References

CVE-2026-111767 on NVD

Listed in

HighMCP serversMissing authorization

More MCP TypeScript SDK CVEs

Oct 6
CVE-2026-1048507.5

The SDK's OAuth client support let the MCP server a client connected to decide which authorization server received the client's OAuth credentials.

 Feb 4
CVE-2026-255367.1

Cross-client response data leak when a single McpServer/Server and transport instance is reused across multiple client connections, most commonly in stateless StreamableHTTPServerTransport deployments.

 Dec 2
CVE-2025-664148.1

The Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default for HTTP-based servers.