Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-111768— Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation

Quick assessment

Affected
modelcontextprotocol typescript-sdk
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Model Context Protocol TypeScript SDK 提供了 Model Context Protocol 的 TypeScript 客户端和服务器实现。在 @modelcontextprotocol/sdk 的 1.3.0 至 1.32.0 版本，以及 @modelcontextprotocol/server 的 2.0.0 至 2.3.0 版本中，HTTP 服务器未对单次请求中验证的数组元素数量和对象键数量实施限制。受影响的攻击面为包含数组或对象键的 HTTP 请求验证过程。触发条件为：数

CVSS 7.5 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-111768

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
Source: CVE Program / CVE List V5
Vulnerability Description
The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP servers did not enforce a limit on the number of array elements and object keys validated in one request. The affected surface is validation of HTTP requests containing arrays or object keys. The trigger is an array-element or object-key validation workload large enough to exhaust memory while remaining within the request size limit. A single request within the default 4 MiB limit can terminate the process with JavaScript heap exhaustion. No credentials are required unless the application authenticates before SDK processing. Tools accepting arrays or records carry the greatest risk. stdio-only servers do not expose the HTTP request path. Upgrading alone does not enable the new validation bound. Operators must configure both a tool-input element bound and an appropriate request body size limit. This issue is fixed in @modelcontextprotocol/sdk 1.32.0 and @modelcontextprotocol/server 2.3.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
modelcontextprotocol typescript-sdk >= 1.3.0, < 1.32.0 -
@modelcontextprotocol server >= 2.0.0, < 2.3.0 -
@modelcontextprotocol sdk >= 1.3.0, < 1.32.0 -

II. Public POCs for CVE-2026-111768

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-111768

请登录查看更多情报信息。

Other References for CVE-2026-111768 (7)

Same Patch Batch · modelcontextprotocol · 2026-11-05 · 4 CVEs total

CVE-2026-111770 7.7 HIGH Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one
CVE-2026-111771 6.8 MEDIUM Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued
CVE-2026-111769 6.5 MEDIUM Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed

IV. Related Vulnerabilities

Same product: typescript-sdk
Same vendor: modelcontextprotocol
Same weakness: CWE-770