MediumVulnerability
GHSA-rvq5-wwqv-78pq: MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service
- Identifiers
- CVE-2026-111771GHSA-rvq5-wwqv-78pq
- Published
- Record updated
- Affected
- @modelcontextprotocol/server-legacy >= 2.0.0, < 2.3.1, fixed in 2.3.1
- @modelcontextprotocol/express >= 2.0.0, < 2.0.2, fixed in 2.0.2
- @modelcontextprotocol/server >= 2.0.0, < 2.3.0, fixed in 2.3.0
- and 1 more
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- @modelcontextprotocol/sdknpmLLM dependency since 2024-11-11 · 18 tracked dependents
- @modelcontextprotocol/servernpmNo LLM dependency detected · 3 tracked dependents
Topics
Related items
- HighCVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro CrewSimilar attack · AWS Security Bulletins
- MediumFrom Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM UsageSimilar attack · Wiz Research Blog
- HighGHSA-22jm-h49p-29qw: MCP TypeScript SDK: Experimental tasks were not tied to the session that created themSimilar attack · GitHub Advisory Database
- MediumGHSA-6prh-2h8m-c8cw: MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodiesSimilar attack · GitHub Advisory Database
- InfoHybrid learning for detection of audio deepfakes and manipulation attacksSimilar attack · Elsevier Security Journals