CVE-2026-111767 | Model Context Protocol Typescript SDK up to 1.31.x InMemoryTaskStore access control

October 20, 2026 Yanac

A vulnerability marked as critical has been reported in Model Context Protocol Typescript SDK up to 1.31.x. This issue affects some unknown processing of the component InMemoryTaskStore. This manipulation causes improper access controls.

This vulnerability is registered as CVE-2026-111767. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More