# Anthropic Model Context Protocol vulnerabilities Source: https://junglewise.ai/threats/technologies/model-context-protocol Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/model-context-protocol.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 11 vulnerabilities in Anthropic Model Context Protocol: 0 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-59951, was published on 14 October 2026. 1 vulnerability in the last four weeks, down 50% on the four before (2). ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 3 - All time: 11 (0 critical, 0 exploited in the wild) ## About Anthropic Model Context Protocol Model Context Protocol is an open standard for connecting AI models to external tools and data sources. ## Latest Anthropic Model Context Protocol vulnerabilities - [CVE-2026-59951: MCP Python SDK unbounded session accumulation in StreamableHTTP](https://junglewise.ai/threats/cve-2026-59951-mcp-python-sdk-unbounded-session-accumulation-in-streamablehttp) (high, CVSS 7.5, published 14 Oct 2026) - [CVE-2026-63128: RMCP Streamable HTTP server unauthenticated session-table memory leak](https://junglewise.ai/threats/cve-2026-63128-rmcp-streamable-http-server-unauthenticated-session-table-memory) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-63127: RMCP missing resource field validation in OAuth metadata](https://junglewise.ai/threats/cve-2026-63127-rmcp-missing-resource-field-validation-in-oauth-metadata) (high, CVSS 8.2, published 16 Sep 2026) - [CVE-2026-67432: Model Context Protocol Ruby SDK memory exhaustion in StreamableHTTPTransport](https://junglewise.ai/threats/cve-2026-67432-model-context-protocol-ruby-sdk-memory-exhaustion-in) (high, CVSS 7.5, published 29 Jul 2026) - [CVE-2026-59950: modelcontextprotocol python-sdk missing origin validation in WebSocket transport](https://junglewise.ai/threats/cve-2026-59950-modelcontextprotocol-python-sdk-missing-origin-validation-in) (high, CVSS 4, published 15 Jul 2026) - [CVE-2026-52870: Model Context Protocol Python SDK missing authorization in experimental tasks](https://junglewise.ai/threats/cve-2026-52870-model-context-protocol-python-sdk-missing-authorization-in) (high, CVSS 7.6, published 15 Jul 2026) - [CVE-2026-52869: modelcontextprotocol mcp authorization bypass in SSE and HTTP transports](https://junglewise.ai/threats/cve-2026-52869-modelcontextprotocol-mcp-authorization-bypass-in-sse-and-http) (high, CVSS 7.1, published 15 Jul 2026) - [CVE-2026-42559: Model Context Protocol RMCP DNS rebinding in Streamable HTTP server](https://junglewise.ai/threats/cve-2026-42559-model-context-protocol-rmcp-dns-rebinding-in-streamable-http) (high, CVSS 8.8, published 14 May 2026) - [CVE-2026-25536: Model Context Protocol TypeScript SDK data leak in McpServer transport](https://junglewise.ai/threats/cve-2026-25536-model-context-protocol-typescript-sdk-data-leak-in-mcpserver) (high, CVSS 7.1, published 4 Feb 2026) - [CVE-2025-66416: Model Context Protocol Python SDK DNS rebinding in HTTP servers](https://junglewise.ai/threats/cve-2025-66416-model-context-protocol-python-sdk-dns-rebinding-in-http-servers) (high, CVSS 8.1, published 2 Dec 2025) - [CVE-2025-53365: Model Context Protocol Python SDK denial of service in HTTP transport](https://junglewise.ai/threats/cve-2025-53365-model-context-protocol-python-sdk-denial-of-service-in-http) (high, CVSS 4, published 4 Jul 2025) ## Most severe Anthropic Model Context Protocol vulnerabilities - [CVE-2026-42559: Model Context Protocol RMCP DNS rebinding in Streamable HTTP server](https://junglewise.ai/threats/cve-2026-42559-model-context-protocol-rmcp-dns-rebinding-in-streamable-http) (high, CVSS 8.8, published 14 May 2026) - [CVE-2026-63127: RMCP missing resource field validation in OAuth metadata](https://junglewise.ai/threats/cve-2026-63127-rmcp-missing-resource-field-validation-in-oauth-metadata) (high, CVSS 8.2, published 16 Sep 2026) - [CVE-2025-66416: Model Context Protocol Python SDK DNS rebinding in HTTP servers](https://junglewise.ai/threats/cve-2025-66416-model-context-protocol-python-sdk-dns-rebinding-in-http-servers) (high, CVSS 8.1, published 2 Dec 2025) - [CVE-2026-52870: Model Context Protocol Python SDK missing authorization in experimental tasks](https://junglewise.ai/threats/cve-2026-52870-model-context-protocol-python-sdk-missing-authorization-in) (high, CVSS 7.6, published 15 Jul 2026) - [CVE-2026-67432: Model Context Protocol Ruby SDK memory exhaustion in StreamableHTTPTransport](https://junglewise.ai/threats/cve-2026-67432-model-context-protocol-ruby-sdk-memory-exhaustion-in) (high, CVSS 7.5, published 29 Jul 2026) - [CVE-2026-63128: RMCP Streamable HTTP server unauthenticated session-table memory leak](https://junglewise.ai/threats/cve-2026-63128-rmcp-streamable-http-server-unauthenticated-session-table-memory) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-59951: MCP Python SDK unbounded session accumulation in StreamableHTTP](https://junglewise.ai/threats/cve-2026-59951-mcp-python-sdk-unbounded-session-accumulation-in-streamablehttp) (high, CVSS 7.5, published 14 Oct 2026) - [CVE-2026-52869: modelcontextprotocol mcp authorization bypass in SSE and HTTP transports](https://junglewise.ai/threats/cve-2026-52869-modelcontextprotocol-mcp-authorization-bypass-in-sse-and-http) (high, CVSS 7.1, published 15 Jul 2026) - [CVE-2026-25536: Model Context Protocol TypeScript SDK data leak in McpServer transport](https://junglewise.ai/threats/cve-2026-25536-model-context-protocol-typescript-sdk-data-leak-in-mcpserver) (high, CVSS 7.1, published 4 Feb 2026) - [CVE-2025-53365: Model Context Protocol Python SDK denial of service in HTTP transport](https://junglewise.ai/threats/cve-2025-53365-model-context-protocol-python-sdk-denial-of-service-in-http) (high, CVSS 4, published 4 Jul 2025) ## Vulnerabilities per week 1 vulnerability in the last four weeks, down 50% on the four before (2). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 2 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Anthropic technologies - [Anthropic Claude Code](https://junglewise.ai/threats/technologies/claude-code): 31 vulnerabilities - [Anthropic Claude Desktop](https://junglewise.ai/threats/technologies/claude-desktop): 6 vulnerabilities - [Anthropic Model Context Protocol SDK (TypeScript)](https://junglewise.ai/threats/technologies/model-context-protocol-sdk-typescript): 5 vulnerabilities - [Anthropic @Modelcontextprotocol/Sdk](https://junglewise.ai/threats/technologies/anthropic-modelcontextprotocol-sdk): 4 vulnerabilities - [Anthropic Claude Agent SDK](https://junglewise.ai/threats/technologies/claude-agent-sdk): 4 vulnerabilities - [Anthropic Model Context Protocol Python SDK](https://junglewise.ai/threats/technologies/anthropic-model-context-protocol-python-sdk): 3 vulnerabilities - [Anthropic Claude Code CLI](https://junglewise.ai/threats/technologies/claude-code-cli): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Anthropic Model Context Protocol vulnerabilities", https://junglewise.ai/threats/technologies/model-context-protocol, 11 November 2026.