VendorsLF Projectsmcp_python_sdkall versions
Vulnerabilities

LF Projects Mcp Python SDK

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2025-66416
DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost
Published 2025-12-02 · Analyzed
8.1EPSS 0.005
CVE-2026-59950
MCP Python SDK: WebSocket server transport does not support Host/Origin validation
Published 2026-07-15 · Analyzed
8.1EPSS 0.002
CVE-2026-52870
MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks
Published 2026-07-15 · Analyzed
7.6EPSS 0.004
CVE-2026-52869
MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
Published 2026-07-15 · Analyzed
7.1EPSS 0.005