All 3 CVE vulnerabilities found in rust-sdk, with AI-generated Chinese analysis, references, and POCs.
Vendor: modelcontextprotocol
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-63127 | RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery CWE-345 | 8.2 | High | 2026-09-16 |
| CVE-2026-63128 | RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service CWE-400 | 7.5 | High | 2026-09-16 |
| CVE-2026-42559 | RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport CWE-346 | 8.8 | High | 2026-05-14 |
All 3 known CVE vulnerabilities affecting rust-sdk with full Chinese analysis, references, and POCs where available.