CVE-2026-116684 | modelcontextprotocol python-sdk up to 1.29.x/2.1.x Token Verifier improper authorization

October 27, 2026 Yanac

A vulnerability, which was classified as critical, has been found in modelcontextprotocol python-sdk up to 1.29.x/2.1.x. Affected is an unknown function of the component Token Verifier. The manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-116684. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More