{"data":{"id":"e2cce4f6-623c-4668-990c-5f4cf96ff309","title":"GHSA-345p-7cg4-v4c7: @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse","summary":"The advisory GHSA-345p-7cg4-v4c7 covers cross-client data leakage in @modelcontextprotocol/sdk, caused by reusing one StreamableHTTPServerTransport across multiple client requests, or one McpServer/Server instance across multiple transports. JSON-RPC message ID collisions, from clients whose default counter starts at 0, can route responses and notifications to the wrong client's HTTP stream. Stateless deployments without sessionIdGenerator are most exposed, and the two issues may affect a deployment separately or together.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-345p-7cg4-v4c7","publishedAt":"2026-02-04T20:04:16.000Z","cveId":"CVE-2026-25536","cweIds":["CWE-362"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@modelcontextprotocol/sdk@>= 1.10.0, <= 1.25.3 (fixed: 1.26.0)"],"affectedPackageNames":["@modelcontextprotocol/sdk"],"affectedPackageRefs":["npm:@modelcontextprotocol/sdk"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["@modelcontextprotocol/sdk","MCP TypeScript SDK"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00384,"epssCheckedAt":"2026-10-10T04:57:21.898Z","kevDateAdded":null,"advisoryAliases":["GHSA-345p-7cg4-v4c7"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-02-04T20:04:16.000Z","capecIds":["CAPEC-26","CAPEC-29"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}