{"schema_version":1,"title":"Modelcontextprotocol vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in Modelcontextprotocol: 0 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-109527, was published on 14 October 2026. 1 vulnerability in the last four weeks, down 67% on the four before (3).","url":"https://junglewise.ai/threats/vendors/modelcontextprotocol","json_url":"https://junglewise.ai/threats/vendors/modelcontextprotocol.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/modelcontextprotocol","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":5,"all_time":13,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":1,"last_90_days":4,"last_365_days":13},"latest":[{"cve":"CVE-2026-109527","cvss":7.5,"epss":0.007,"slug":"cve-2026-109527-the-model-context-protocol-python-sdk-is-the-official-python-sdk","title":"Model Context Protocol Python SDK request body buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-14T18:17:33.447+00:00","url":"https://junglewise.ai/threats/cve-2026-109527-the-model-context-protocol-python-sdk-is-the-official-python-sdk"},{"cvss":4,"slug":"rmcp-oauth-client-fetches-server-controlled-resource-metadata-urls-6efc52a6","title":"rmcp OAuth client SSRF via server-controlled resource_metadata URL","severity":"medium","exploited":false,"published_at":"2026-10-02T16:12:31+00:00","url":"https://junglewise.ai/threats/rmcp-oauth-client-fetches-server-controlled-resource-metadata-urls-6efc52a6"},{"cve":"CVE-2026-104120","cvss":7.3,"epss":0.0029,"slug":"cve-2026-104120-a-security-vulnerability-has-been-detected-in","title":"Model Context Protocol mcp-server-fetch SSRF in fetch_url","severity":"high","exploited":false,"published_at":"2026-10-02T03:16:38.84+00:00","url":"https://junglewise.ai/threats/cve-2026-104120-a-security-vulnerability-has-been-detected-in"},{"cve":"CVE-2026-63128","cvss":7.5,"epss":0.0063,"slug":"cve-2026-63128-rmcp-streamable-http-server-unauthenticated-session-table-memory","title":"RMCP Streamable HTTP server unauthenticated session-table memory leak","severity":"high","exploited":false,"published_at":"2026-09-16T15:17:39.96+00:00","url":"https://junglewise.ai/threats/cve-2026-63128-rmcp-streamable-http-server-unauthenticated-session-table-memory"},{"cve":"CVE-2026-63119","cvss":6.2,"epss":0.0018,"slug":"cve-2026-63119-modelcontextprotocol-ruby-sdk-memory-exhaustion-in-stdio","title":"modelcontextprotocol ruby-sdk memory exhaustion in Stdio transports","severity":"medium","exploited":false,"published_at":"2026-07-29T20:17:10.79+00:00","url":"https://junglewise.ai/threats/cve-2026-63119-modelcontextprotocol-ruby-sdk-memory-exhaustion-in-stdio"},{"cve":"CVE-2026-63118","cvss":4,"epss":0.0026,"slug":"cve-2026-63118-modelcontextprotocol-ruby-sdk-dns-rebinding-in","title":"modelcontextprotocol ruby-sdk DNS rebinding in StreamableHTTPTransport","severity":"medium","exploited":false,"published_at":"2026-07-29T20:17:10.63+00:00","url":"https://junglewise.ai/threats/cve-2026-63118-modelcontextprotocol-ruby-sdk-dns-rebinding-in"},{"cve":"CVE-2026-44428","cvss":4.7,"epss":0.0027,"slug":"cve-2026-44428-model-context-protocol-registry-oidc-token-replay-via-shared","title":"Model Context Protocol Registry OIDC token replay via shared audience","severity":"medium","exploited":false,"published_at":"2026-05-14T22:16:44.593+00:00","url":"https://junglewise.ai/threats/cve-2026-44428-model-context-protocol-registry-oidc-token-replay-via-shared"},{"cve":"CVE-2026-44427","cvss":4,"epss":0.0044,"slug":"cve-2026-44427-model-context-protocol-registry-open-redirect-in","title":"Model Context Protocol Registry open redirect in TrailingSlashMiddleware","severity":"medium","exploited":false,"published_at":"2026-05-14T22:16:44.45+00:00","url":"https://junglewise.ai/threats/cve-2026-44427-model-context-protocol-registry-open-redirect-in"},{"cve":"CVE-2026-45781","cvss":3.5,"epss":0.0025,"slug":"cve-2026-45781-model-context-protocol-registry-ownership-bypass-in-oci-validator","title":"Model Context Protocol Registry ownership bypass in OCI validator","severity":"low","exploited":false,"published_at":"2026-05-14T21:16:48.48+00:00","url":"https://junglewise.ai/threats/cve-2026-45781-model-context-protocol-registry-ownership-bypass-in-oci-validator"},{"cve":"CVE-2026-44430","cvss":4,"epss":0.0029,"slug":"cve-2026-44430-model-context-protocol-registry-ssrf-via-ipv6-filter-bypass","title":"Model Context Protocol Registry SSRF via IPv6 Filter Bypass","severity":"medium","exploited":false,"published_at":"2026-05-14T21:16:46.827+00:00","url":"https://junglewise.ai/threats/cve-2026-44430-model-context-protocol-registry-ssrf-via-ipv6-filter-bypass"},{"cve":"CVE-2026-44429","cvss":5.4,"epss":0.0024,"slug":"cve-2026-44429-mcp-registry-stored-xss-in-catalogue-ui-via-websiteurl","title":"MCP Registry stored XSS in catalogue UI via websiteUrl","severity":"medium","exploited":false,"published_at":"2026-05-14T21:16:46.677+00:00","url":"https://junglewise.ai/threats/cve-2026-44429-mcp-registry-stored-xss-in-catalogue-ui-via-websiteurl"},{"cve":"CVE-2026-42559","cvss":8.8,"epss":0.0024,"slug":"cve-2026-42559-model-context-protocol-rmcp-dns-rebinding-in-streamable-http","title":"Model Context Protocol RMCP DNS rebinding in Streamable HTTP server","severity":"high","exploited":false,"published_at":"2026-05-14T15:16:46.75+00:00","url":"https://junglewise.ai/threats/cve-2026-42559-model-context-protocol-rmcp-dns-rebinding-in-streamable-http"},{"cve":"CVE-2026-27896","cvss":7.5,"epss":0.0046,"slug":"cve-2026-27896-model-context-protocol-go-sdk-improper-case-sensitivity-in-json","title":"Model Context Protocol Go SDK improper case sensitivity in JSON-RPC parsing","severity":"high","exploited":false,"published_at":"2026-02-26T01:16:25.63+00:00","url":"https://junglewise.ai/threats/cve-2026-27896-model-context-protocol-go-sdk-improper-case-sensitivity-in-json"}],"vendor":{"hub":true,"name":"Modelcontextprotocol","slug":"modelcontextprotocol","description":"Organization that develops the Model Context Protocol for standardized AI tool integration.","url":"https://junglewise.ai/threats/vendors/modelcontextprotocol"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-42559","cvss":8.8,"epss":0.0024,"slug":"cve-2026-42559-model-context-protocol-rmcp-dns-rebinding-in-streamable-http","title":"Model Context Protocol RMCP DNS rebinding in Streamable HTTP server","severity":"high","exploited":false,"published_at":"2026-05-14T15:16:46.75+00:00","url":"https://junglewise.ai/threats/cve-2026-42559-model-context-protocol-rmcp-dns-rebinding-in-streamable-http"},{"cve":"CVE-2026-109527","cvss":7.5,"epss":0.007,"slug":"cve-2026-109527-the-model-context-protocol-python-sdk-is-the-official-python-sdk","title":"Model Context Protocol Python SDK request body buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-14T18:17:33.447+00:00","url":"https://junglewise.ai/threats/cve-2026-109527-the-model-context-protocol-python-sdk-is-the-official-python-sdk"},{"cve":"CVE-2026-63128","cvss":7.5,"epss":0.0063,"slug":"cve-2026-63128-rmcp-streamable-http-server-unauthenticated-session-table-memory","title":"RMCP Streamable HTTP server unauthenticated session-table memory leak","severity":"high","exploited":false,"published_at":"2026-09-16T15:17:39.96+00:00","url":"https://junglewise.ai/threats/cve-2026-63128-rmcp-streamable-http-server-unauthenticated-session-table-memory"},{"cve":"CVE-2026-27896","cvss":7.5,"epss":0.0046,"slug":"cve-2026-27896-model-context-protocol-go-sdk-improper-case-sensitivity-in-json","title":"Model Context Protocol Go SDK improper case sensitivity in JSON-RPC parsing","severity":"high","exploited":false,"published_at":"2026-02-26T01:16:25.63+00:00","url":"https://junglewise.ai/threats/cve-2026-27896-model-context-protocol-go-sdk-improper-case-sensitivity-in-json"},{"cve":"CVE-2026-104120","cvss":7.3,"epss":0.0029,"slug":"cve-2026-104120-a-security-vulnerability-has-been-detected-in","title":"Model Context Protocol mcp-server-fetch SSRF in fetch_url","severity":"high","exploited":false,"published_at":"2026-10-02T03:16:38.84+00:00","url":"https://junglewise.ai/threats/cve-2026-104120-a-security-vulnerability-has-been-detected-in"},{"cve":"CVE-2026-63119","cvss":6.2,"epss":0.0018,"slug":"cve-2026-63119-modelcontextprotocol-ruby-sdk-memory-exhaustion-in-stdio","title":"modelcontextprotocol ruby-sdk memory exhaustion in Stdio transports","severity":"medium","exploited":false,"published_at":"2026-07-29T20:17:10.79+00:00","url":"https://junglewise.ai/threats/cve-2026-63119-modelcontextprotocol-ruby-sdk-memory-exhaustion-in-stdio"},{"cve":"CVE-2026-44429","cvss":5.4,"epss":0.0024,"slug":"cve-2026-44429-mcp-registry-stored-xss-in-catalogue-ui-via-websiteurl","title":"MCP Registry stored XSS in catalogue UI via websiteUrl","severity":"medium","exploited":false,"published_at":"2026-05-14T21:16:46.677+00:00","url":"https://junglewise.ai/threats/cve-2026-44429-mcp-registry-stored-xss-in-catalogue-ui-via-websiteurl"},{"cve":"CVE-2026-44428","cvss":4.7,"epss":0.0027,"slug":"cve-2026-44428-model-context-protocol-registry-oidc-token-replay-via-shared","title":"Model Context Protocol Registry OIDC token replay via shared audience","severity":"medium","exploited":false,"published_at":"2026-05-14T22:16:44.593+00:00","url":"https://junglewise.ai/threats/cve-2026-44428-model-context-protocol-registry-oidc-token-replay-via-shared"},{"cve":"CVE-2026-44427","cvss":4,"epss":0.0044,"slug":"cve-2026-44427-model-context-protocol-registry-open-redirect-in","title":"Model Context Protocol Registry open redirect in TrailingSlashMiddleware","severity":"medium","exploited":false,"published_at":"2026-05-14T22:16:44.45+00:00","url":"https://junglewise.ai/threats/cve-2026-44427-model-context-protocol-registry-open-redirect-in"},{"cve":"CVE-2026-44430","cvss":4,"epss":0.0029,"slug":"cve-2026-44430-model-context-protocol-registry-ssrf-via-ipv6-filter-bypass","title":"Model Context Protocol Registry SSRF via IPv6 Filter Bypass","severity":"medium","exploited":false,"published_at":"2026-05-14T21:16:46.827+00:00","url":"https://junglewise.ai/threats/cve-2026-44430-model-context-protocol-registry-ssrf-via-ipv6-filter-bypass"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[]}