Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.6.0 until 1.32.0 in @modelcontextprotocol/sdk, from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, from 2.0.0 until 2.0.2 in @modelcontextprotocol/express, and from 2.0.0 until 2.3.1 in @modelcontextprotocol/server-legacy, server-side bearer authentication could accept a valid access token issued for a different service because the SDK did not enforce the token audience. The affected surface is server-side HTTP bearer authentication. The trigger is a valid token whose audience names another service. The authorization server must issue tokens for multiple services, and the application's verifyAccessToken() must not independently validate aud. Applications already validating aud inside verifyAccessToken() are not affected. An attacker with a token for another service could authenticate to the MCP server and obtain the confidentiality and integrity capabilities granted to an authenticated caller. Upgrading alone leaves the new audience validation disabled. Operators must enable audience validation and provide the token audience together. Enabling only the expected audience check causes every request to receive HTTP 401. This issue is fixed in @modelcontextprotocol/sdk 1.32.0, @modelcontextprotocol/server 2.3.0, @modelcontextprotocol/express 2.0.2, and @modelcontextprotocol/server-legacy 2.3.1.

Etkilenen sürümler5 yazılım

Kaynaklar13 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…pt-sdk/security/advisories/GHSA-rvq5-wwqv-78pq Diğer
• github.com/modelcontextprotocol/typescript-sdk/pull/2929 Diğer
• github.com/modelcontextprotocol/typescript-sdk/pull/2930 Diğer
• github.com/modelcontextprotocol/typescript-sdk/pull/2952 Diğer
• github.com/…ommit/40f8f4e229d963cd7fd2890bda2aeebe7005299a Diğer
• github.com/…ommit/5a0724d14cf34a27a3b070224d2996cdd611df9f Diğer
• github.com/…ommit/5a1867390b91b8836f49af76c45427279f513325 Diğer
• github.com/…extprotocol/typescript-sdk/releases/tag/1.32.0 Diğer
• github.com/…leases/tag/@modelcontextprotocol/express@2.0.2 Diğer
• github.com/…/tag/@modelcontextprotocol/server-legacy@2.3.1 Diğer
• github.com/…eleases/tag/@modelcontextprotocol/server@2.3.0 Diğer

Kayıt geçmişi

1. 6 Kas 2026 00:08Yayımlandı

İlgili açıklar

• 7,7 CVE-2026-111770Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another
• 7,5 CVE-2026-111768Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
• 6,5 CVE-2026-111769Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies
• 8,6 CVE-2026-111767MCP TypeScript SDK'da deneysel görevlerin oluşturuldukları oturuma bağlanmaması sorunu
• 6,5 CVE-2026-102943Dagu MCP DAG specification read bypasses path containment and workspace isolation
• 7,2 CVE-2026-88984Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines