CVE-2026-116686 | modelcontextprotocol python-sdk up to 1.29.x/2.1.x Tool Call server-side request forgery

October 27, 2026 Yanac

A vulnerability was found in modelcontextprotocol python-sdk up to 1.29.x/2.1.x. It has been classified as critical. This vulnerability affects unknown code of the component Tool Call. Performing a manipulation results in server-side request forgery.

This vulnerability is identified as CVE-2026-116686. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More