Login Request a demo
High severity · published Jul 15, 2026
CVE-2026-59950
MCP Python SDK: WebSocket server transport does not support Host/Origin validation
8.1
CVSS
0.2%
EPSS
No
On KEV
Description
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.28.1, the deprecated mcp.server.websocket.websocket_server transport accepted WebSocket handshakes without applying Host or Origin header validation, leaving no SDK-level way to restrict which origins could connect to applications that exposed that transport. This issue is fixed in version 1.28.1.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PY
python-sdk · modelcontextprotocol
< 1.28.1 · source: vendor
MP
Mcp Python Sdk · Lfprojects
before 1.28.1 · source: NVD
Affected product
PY
python-sdk
modelcontextprotocol
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-59950
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-59950
Patch
https://github.com/modelcontextprotocol/python-sdk/commit/777b8d06710c140e3606b0d4598e2aa48546c266
Issue Tracking
https://github.com/modelcontextprotocol/python-sdk/pull/2992
Release Notes
https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.28.1
Vendor Advisory
https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-vj7q-gjh5-988w
More from python-sdk
7.6
CVE-2026-52870
MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks
7.5
CVE-2026-109527
Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies
7.1
CVE-2026-52869
MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
6.9
CVE-2026-59951
MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion
6.8
CVE-2026-116684
Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server