CVE-2026-67430 | modelcontextprotocol ruby-sdk up to 0.22.x StreamableHTTPTransport allocation of resources

July 29, 2026 Yanac

A vulnerability classified as problematic has been found in modelcontextprotocol ruby-sdk up to 0.22.x. This affects the function MCP::Server::Transports::StreamableHTTPTransport of the component StreamableHTTPTransport. This manipulation causes allocation of resources.

This vulnerability is handled as CVE-2026-67430. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More