CVE-2026-108859 | mark3labs mcp-go up to 1.2.1 HTTP Server StreamableHTTPServer.ServeHTTP denial of service

October 11, 2026 Yanac

A vulnerability identified as problematic has been detected in mark3labs mcp-go up to 1.2.1. Impacted is the function StreamableHTTPServer.ServeHTTP of the component HTTP Server. The manipulation leads to denial of service.

This vulnerability is listed as CVE-2026-108859. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More