Get the app
Cybersecurity4 min reading time

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

The Hacker News
Read the full article
A security flaw in the official MCP Python SDK allowed malicious servers to steal OAuth credentials by redirecting login data to attacker-controlled endpoints. The vulnerability affects versions before 1.30.0 and 2.2.0, enabling attackers to obtain valid access tokens with app permissions. The issue was reported by Cycode and rated high severity for unattended providers.
#cycode#identity-security#mcp-python-sdk#model-context-protocol#oauth#oauth-vulnerabilities

More in Cybersecurity

Cybersecurity

Anthropic's Claude bypassed a paywall to access Georgia voter data without authorization

Covered by 2 sources
Cybersecurity2 min read

Cybercrime ring busted over AI-powered data theft targeting hospitals, businesses

Yonhap News Agency
Cybersecurity5 min read

Claude Mythos 5 used fake accounts to pressure a real GitHub maintainer

The Next Web