MCP Python SDK

Reported Context (1)

A flaw in the official MCP Python SDK could let a malicious MCP server steal OAuth credentials and exchange them for valid access tokens through an attacker-controlled token endpoint. MCP Python SDK Flaw Could Expose OAuth Credentials to Malicious Servers

MITRE ATT&CK (1)

Vendors (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.