What’s Vulnerable › Products

modelcontextprotocol rust-sdk vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your modelcontextprotocol rust-sdk version is affected

Latest modelcontextprotocol rust-sdk vulnerabilities

• CVE-2026-64684 — RMCP: Custom HTTP headers leak to cross-origin redirect targets (CVSS 6.8)
• CVE-2026-63128 — RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service (CVSS 7.5)
• CVE-2026-63127 — RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery (CVSS 8.2)
• CVE-2026-42559 — RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport (CVSS 8.8)