What’s Vulnerable › Products

modelcontextprotocol java-sdk vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your modelcontextprotocol java-sdk version is affected

Latest modelcontextprotocol java-sdk vulnerabilities

• CVE-2026-35568 — MCP Java-SDK has a DNS Rebinding Vulnerability (CVSS 5.7)
• CVE-2026-34237 — MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *) (CVSS 6.1)