# Modelcontextprotocol vulnerabilities Source: https://junglewise.ai/threats/vendors/modelcontextprotocol Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/modelcontextprotocol.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 13 vulnerabilities in Modelcontextprotocol: 0 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-109527, was published on 14 October 2026. 1 vulnerability in the last four weeks, down 67% on the four before (3). ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 4 - All time: 13 (0 critical, 0 exploited in the wild) ## About Modelcontextprotocol Organization that develops the Model Context Protocol for standardized AI tool integration. ## Latest Modelcontextprotocol vulnerabilities - [CVE-2026-109527: Model Context Protocol Python SDK request body buffer overflow](https://junglewise.ai/threats/cve-2026-109527-the-model-context-protocol-python-sdk-is-the-official-python-sdk) (high, CVSS 7.5, published 14 Oct 2026) - [rmcp OAuth client SSRF via server-controlled resource_metadata URL](https://junglewise.ai/threats/rmcp-oauth-client-fetches-server-controlled-resource-metadata-urls-6efc52a6) (medium, CVSS 4, published 2 Oct 2026) - [CVE-2026-104120: Model Context Protocol mcp-server-fetch SSRF in fetch_url](https://junglewise.ai/threats/cve-2026-104120-a-security-vulnerability-has-been-detected-in) (high, CVSS 7.3, published 2 Oct 2026) - [CVE-2026-63128: RMCP Streamable HTTP server unauthenticated session-table memory leak](https://junglewise.ai/threats/cve-2026-63128-rmcp-streamable-http-server-unauthenticated-session-table-memory) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-63119: modelcontextprotocol ruby-sdk memory exhaustion in Stdio transports](https://junglewise.ai/threats/cve-2026-63119-modelcontextprotocol-ruby-sdk-memory-exhaustion-in-stdio) (medium, CVSS 6.2, published 29 Jul 2026) - [CVE-2026-63118: modelcontextprotocol ruby-sdk DNS rebinding in StreamableHTTPTransport](https://junglewise.ai/threats/cve-2026-63118-modelcontextprotocol-ruby-sdk-dns-rebinding-in) (medium, CVSS 4, published 29 Jul 2026) - [CVE-2026-44428: Model Context Protocol Registry OIDC token replay via shared audience](https://junglewise.ai/threats/cve-2026-44428-model-context-protocol-registry-oidc-token-replay-via-shared) (medium, CVSS 4.7, published 14 May 2026) - [CVE-2026-44427: Model Context Protocol Registry open redirect in TrailingSlashMiddleware](https://junglewise.ai/threats/cve-2026-44427-model-context-protocol-registry-open-redirect-in) (medium, CVSS 4, published 14 May 2026) - [CVE-2026-45781: Model Context Protocol Registry ownership bypass in OCI validator](https://junglewise.ai/threats/cve-2026-45781-model-context-protocol-registry-ownership-bypass-in-oci-validator) (low, CVSS 3.5, published 14 May 2026) - [CVE-2026-44430: Model Context Protocol Registry SSRF via IPv6 Filter Bypass](https://junglewise.ai/threats/cve-2026-44430-model-context-protocol-registry-ssrf-via-ipv6-filter-bypass) (medium, CVSS 4, published 14 May 2026) - [CVE-2026-44429: MCP Registry stored XSS in catalogue UI via websiteUrl](https://junglewise.ai/threats/cve-2026-44429-mcp-registry-stored-xss-in-catalogue-ui-via-websiteurl) (medium, CVSS 5.4, published 14 May 2026) - [CVE-2026-42559: Model Context Protocol RMCP DNS rebinding in Streamable HTTP server](https://junglewise.ai/threats/cve-2026-42559-model-context-protocol-rmcp-dns-rebinding-in-streamable-http) (high, CVSS 8.8, published 14 May 2026) - [CVE-2026-27896: Model Context Protocol Go SDK improper case sensitivity in JSON-RPC parsing](https://junglewise.ai/threats/cve-2026-27896-model-context-protocol-go-sdk-improper-case-sensitivity-in-json) (high, CVSS 7.5, published 26 Feb 2026) ## Most severe Modelcontextprotocol vulnerabilities - [CVE-2026-42559: Model Context Protocol RMCP DNS rebinding in Streamable HTTP server](https://junglewise.ai/threats/cve-2026-42559-model-context-protocol-rmcp-dns-rebinding-in-streamable-http) (high, CVSS 8.8, published 14 May 2026) - [CVE-2026-109527: Model Context Protocol Python SDK request body buffer overflow](https://junglewise.ai/threats/cve-2026-109527-the-model-context-protocol-python-sdk-is-the-official-python-sdk) (high, CVSS 7.5, published 14 Oct 2026) - [CVE-2026-63128: RMCP Streamable HTTP server unauthenticated session-table memory leak](https://junglewise.ai/threats/cve-2026-63128-rmcp-streamable-http-server-unauthenticated-session-table-memory) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-27896: Model Context Protocol Go SDK improper case sensitivity in JSON-RPC parsing](https://junglewise.ai/threats/cve-2026-27896-model-context-protocol-go-sdk-improper-case-sensitivity-in-json) (high, CVSS 7.5, published 26 Feb 2026) - [CVE-2026-104120: Model Context Protocol mcp-server-fetch SSRF in fetch_url](https://junglewise.ai/threats/cve-2026-104120-a-security-vulnerability-has-been-detected-in) (high, CVSS 7.3, published 2 Oct 2026) - [CVE-2026-63119: modelcontextprotocol ruby-sdk memory exhaustion in Stdio transports](https://junglewise.ai/threats/cve-2026-63119-modelcontextprotocol-ruby-sdk-memory-exhaustion-in-stdio) (medium, CVSS 6.2, published 29 Jul 2026) - [CVE-2026-44429: MCP Registry stored XSS in catalogue UI via websiteUrl](https://junglewise.ai/threats/cve-2026-44429-mcp-registry-stored-xss-in-catalogue-ui-via-websiteurl) (medium, CVSS 5.4, published 14 May 2026) - [CVE-2026-44428: Model Context Protocol Registry OIDC token replay via shared audience](https://junglewise.ai/threats/cve-2026-44428-model-context-protocol-registry-oidc-token-replay-via-shared) (medium, CVSS 4.7, published 14 May 2026) - [CVE-2026-44427: Model Context Protocol Registry open redirect in TrailingSlashMiddleware](https://junglewise.ai/threats/cve-2026-44427-model-context-protocol-registry-open-redirect-in) (medium, CVSS 4, published 14 May 2026) - [CVE-2026-44430: Model Context Protocol Registry SSRF via IPv6 Filter Bypass](https://junglewise.ai/threats/cve-2026-44430-model-context-protocol-registry-ssrf-via-ipv6-filter-bypass) (medium, CVSS 4, published 14 May 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, down 67% on the four before (3). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 2 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Modelcontextprotocol vulnerabilities", https://junglewise.ai/threats/vendors/modelcontextprotocol, 9 November 2026.