CVE-2026-104850

[CVE catalog]

Severity

High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Published

Oct 6, 2026, 3:35:44 PM UTC

Updated

Oct 6, 2026, 3:46:47 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.23% · Oct 25, 2026

A flaw was found in the Model Context Protocol (MCP) TypeScript SDK. A malicious or compromised MCP server can trigger an information disclosure vulnerability by specifying an arbitrary authorization server in its metadata. Because the client implementation fails to bind stored credentials to their designated authorization server, connecting to an untrusted server causes the client to forward sensitive OAuth tokens and secrets without user interaction. @modelcontextprotocol/sdk: @modelcontextprotocol/client: MCP TypeScript SDK: Information disclosure via unbound OAuth credentials Red Hat rates this vulnerability as an Important severity because it allows a malicious endpoint to silently extract sensitive authentication secrets and tokens over the network without requiring user interaction. The exposure specifically affects environments where Model Context Protocol client components establish HTTP connections to untrusted external servers while configured with OAuth authentication providers. Workloads communicating exclusively over local standard input/output channels or connecting only to verified, trustworthy endpoints are not susceptible to credential exfiltration. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.