CVE-2026-116685 | modelcontextprotocol python-sdk up to 1.29.x/2.1.x streamable_http_client redirect

October 27, 2026 Yanac

A vulnerability has been found in modelcontextprotocol python-sdk up to 1.29.x/2.1.x and classified as problematic. Affected by this issue is some unknown functionality of the component streamable_http_client. This manipulation causes open redirect.

The identification of this vulnerability is CVE-2026-116685. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More