Get the app
Cybersecurity4 min reading time

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

The Hacker News
Read the full article
A security flaw in the official MCP Python SDK allowed malicious servers to steal OAuth credentials by redirecting login data to attacker-controlled endpoints. The vulnerability affects versions before 1.30.0 and 2.2.0, enabling attackers to obtain valid access tokens with app permissions. The issue was reported by Cycode and rated high severity for unattended providers.
#cycode#identity-security#mcp-python-sdk#model-context-protocol#oauth#oauth-vulnerabilities

More in Cybersecurity

Cybersecurity2 min read

Russia was not ready for the data center war it started with Ukraine

Covered by 2 sources
Cybersecurity4 min read

UK to strengthen cyber defences as minister calls for AI firms to increase safety efforts

Covered by 2 sources
Cybersecurity5 min read

When AI Becomes The Threat: A Blueprint For Managing Frontier AI Risk

Covered by 2 sources