CyberRota Analysis
AI-GeneratedThe MCP Python SDK versions 1.23.0 to 1.27.2 are vulnerable due to inadequate session tracking for task management, enabling unauthorized clients to enumerate, access results, and manipulate tasks created by other clients. This flaw poses a significant risk of data exposure and operational disruption. Organizations using this SDK should prioritize upgrading to version 1.27.2 to mitigate these security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.23.0 until 1.27.2, default handlers installed by server.experimental.enable_tasks() for tasks/list, tasks/get, tasks/result, and tasks/cancel operate only on task identifiers without recording the session that created each task, allowing any connected client to enumerate, read results from, consume messages for, or cancel other clients' tasks. This issue is fixed in version 1.27.2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)