CVE-2026-52870 | BDVDB-2026-348653 Detail
modelcontextprotocolpython-sdk
Description#
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.23.0 until 1.27.2, default handlers installed by server.experimental.enable_tasks() for tasks/list, tasks/get, tasks/result, and tasks/cancel operate only on task identifiers without recording the session that created each task, allowing any connected client to enumerate, read results from, consume messages for, or cancel other clients' tasks. This issue is fixed in version 1.27.2.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact low, availability impact low. Attack vector: network.
Weaknesses#
- CWE-862 Missing Authorization
References#
- https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-hvrp-rf83-w775
- https://github.com/modelcontextprotocol/python-sdk/pull/2720
- https://github.com/modelcontextprotocol/python-sdk/commit/62137874ff26dd74d2fea80ff528a7fd9ca7a5e7
- https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.27.2
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.