CVE-2026-111768 | modelcontextprotocol createMcpHandler maxToolInputElements/maxRequestBodySize allocation of resources

October 20, 2026 Yanac

A vulnerability was found in modelcontextprotocol. It has been declared as problematic. This vulnerability affects the function createMcpHandler. The manipulation of the argument maxToolInputElements/maxRequestBodySize results in allocation of resources.

This vulnerability is known as CVE-2026-111768. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More