Product
An insecure global SessionStore implementation in deepseek-mcp-server versions 1.4.2 through 1.6.9 allows unauthorized callers to enumerate and manipulate other users' conversation contexts via the HTTP transport.