« Back to list

Modelcontextprotocol

Modelcontextprotocol Client: vulnerabilities and CVEs

Modelcontextprotocol Client has 1 published vulnerabilities, 1 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs1
Last 12 months1
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-104850High (7.5)——Oct 6, 2026
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1190 Exploit Public-Facing Application1
  2. T1552.007 Container API1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Modelcontextprotocol