---
id: CVE-2026-111767
title: >-
  MCP TypeScript SDK: Experimental tasks were not tied to the session that
  created them
summary: >-
  MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol
  servers and clients. From version 1.24.0 to before version 1.32.0, the
  experimental tasks feature (taskStore) did not check which session created a
  task. Client…
severity: high
cvss: 8.6
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L'
cvssSource: cna
cwe:
  - CWE-639
  - CWE-862
vendor: modelcontextprotocol
product: typescript-sdk
affected:
  - 'typescript-sdk >= 1.24.0, < 1.32.0'
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-20T19:02:29.851772Z'
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T19:02:40.151Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-111767'
references:
  - url: >-
      https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-22jm-h49p-29qw
    label: >-
      https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-22jm-h49p-29qw
  - url: 'https://github.com/modelcontextprotocol/typescript-sdk/pull/2925'
    label: 'https://github.com/modelcontextprotocol/typescript-sdk/pull/2925'
  - url: >-
      https://github.com/modelcontextprotocol/typescript-sdk/commit/727075b5bbeb77fbea22041b36b72a73042160fa
    label: >-
      https://github.com/modelcontextprotocol/typescript-sdk/commit/727075b5bbeb77fbea22041b36b72a73042160fa
  - url: 'https://github.com/advisories/GHSA-22jm-h49p-29qw'
tags:
  - cve.org
  - ghsa
  - npm
aliases:
  - GHSA-22jm-h49p-29qw
ecosystem: npm
patched:
  - '@modelcontextprotocol/sdk 1.32.0'
ingestedAt: '2026-10-20T19:16:14.376Z'
---

## Overview

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. This issue has been patched in version 1.32.0.

## Affected

- `typescript-sdk >= 1.24.0, < 1.32.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-111767)

Affected packages:

- `@modelcontextprotocol/sdk >= 1.24.0, < 1.32.0`

Patched in:

- `@modelcontextprotocol/sdk 1.32.0`

Source: https://github.com/advisories/GHSA-22jm-h49p-29qw