CyberRota Analysis
AI-GeneratedThe MCP Python SDK (mcp) prior to version 1.27.2 is vulnerable due to improper session verification, allowing an authenticated client to inject JSON-RPC messages into existing sessions using only the session ID or Mcp-Session-Id header. This could lead to unauthorized access and manipulation of session data, potentially compromising the integrity of the application. Organizations utilizing this SDK should prioritize upgrading to version 1.27.2 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.27.2, the SSE and stateful Streamable HTTP transports mcp.server.sse.SseServerTransport and mcp.server.streamable_http_manager.StreamableHTTPSessionManager route requests to existing sessions using only the session_id query parameter or Mcp-Session-Id header without verifying the authenticated principal that created the session, allowing a different bearer-token-authenticated client with a known session ID to inject JSON-RPC messages into that session. This issue is fixed in version 1.27.2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)