CVE-2026-55604 | DeepSeek MCP Server up to 1.6.x SessionStore session_id information disclosure

July 10, 2026 Yanac

A vulnerability classified as problematic has been found in DeepSeek MCP Server up to 1.6.x. Impacted is an unknown function of the component SessionStore. The manipulation of the argument session_id leads to information disclosure.

This vulnerability is uniquely identified as CVE-2026-55604. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More