CVE-2026-111770 | modelcontextprotocol modelcontextprotocol-server up to 2.2.0 Shared Transport privileges management

October 20, 2026 Yanac

A vulnerability identified as critical has been detected in modelcontextprotocol modelcontextprotocol-server up to 2.2.0. The affected element is an unknown function of the component Shared Transport. Performing a manipulation results in improper privilege management.

This vulnerability was named CVE-2026-111770. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More