CVE-2026-59950 | modelcontextprotocol MCP up to 1.28.0 WebSocket Server input validation

July 15, 2026 Yanac

A vulnerability was found in modelcontextprotocol MCP up to 1.28.0. It has been classified as critical. This issue affects some unknown processing of the component WebSocket Server. This manipulation causes improper input validation.

This vulnerability is registered as CVE-2026-59950. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More