modelcontextprotocol has 7 CVEs on record. Disclosure cadence is accelerating: 4 in the last 90 days against 2 in the 90 before. The busiest recent month was September 2026 with 4. The median CVSS is 7.0 (high). None have a confirmed exploitation report. Most affected products: rust-sdk (3), github.com/modelcontextprotocol/go-sdk (1), github.com/modelcontextprotocol/registry (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.0
- Publish → KEV
- —
- Last 90 days
- 4 prev 2
Products
- rust-sdk 3
- github.com/modelcontextprotocol/go-sdk 1
- github.com/modelcontextprotocol/registry 1
- go-sdk 1
- io.modelcontextprotocol:kotlin-sdk 1
Worst active — by depth score
CVE-2026-63127High· 8.2RMCP is an official Rust SDK for the Model Context Protocol57CVE-2026-63128High· 7.5RMCP is an official Rust SDK for the Model Context Protocol53CVE-2026-53937Medium· 6.2MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol46CVE-2026-34742High· 8.1DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost45CVE-2026-27896High· 7.0MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity39
modelcontextprotocol vulnerabilities
CVEs affecting modelcontextprotocol, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2026-64684Medium· 6.8RMCP is an official Rust SDK for the Model Context Protocol
RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.1.0, the rmcp crate's StreamableHttpClientTransport in crates/rmcp/src/transport/common/reqwest/streamable_http_client.rs builds its default_http_client with reqwest…
CVE-2026-63128High· 7.5PoCRMCP is an official Rust SDK for the Model Context Protocol
RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp/src/transport/streamable_http_server/tower.rs allows an unauthenticated client to send a well-fo…
CVE-2026-63127High· 8.2PoCRMCP is an official Rust SDK for the Model Context Protocol
RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's OAuth implementation in crates/rmcp/src/transport/auth.rs omits the RFC 9728 resource field from ResourceServerMetadata and allows discover_oau…
CVE-2026-53937Medium· 6.2PoCMCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol
MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, `ReadBuffer.append` in `kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared…
CVE-2026-45781Low· 3.5MCP Registry: OCI validator skips ownership check on upstream rate limits
MCP Registry: OCI validator skips ownership check on upstream rate limits
CVE-2026-34742High· 8.1DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost
DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost
CVE-2026-27896High· 7.0MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity
The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions prior to 1.3.1. Go's standard library performs case-insensitive matching of JSON keys to struct field tags — a field tagg…