{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/mcp-typescript-sdk-1.24.0-1.31.x/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:model_context_protocol:typescript_sdk:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.6,"id":"CVE-2026-111767"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["MCP TypeScript SDK (1.24.0-1.31.x)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Model Context Protocol"],"content_html":"\u003cp\u003eThe MCP TypeScript SDK, utilized for developing Model Context Protocol servers and clients, contains a significant authorization vulnerability (CVE-2026-111767) affecting the experimental tasks feature (taskStore). The flaw exists in versions 1.24.0 through 1.31.x. The implementation of the InMemoryTaskStore fails to validate session ownership when retrieving, listing, or modifying tasks. As a result, in environments where multiple clients or sessions share a single instance of the task store, an attacker can access sensitive task information, list all active tasks, or cancel tasks belonging to other sessions. This failure in multi-tenant isolation poses a risk for any application leveraging the taskStore feature in a shared context. The maintainers have patched this vulnerability in version 1.32.0.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation leads to unauthorized information disclosure and disruption of service for legitimate users. In multi-tenant MCP applications, an attacker can enumerate tasks, intercept task-related data from other sessions, and perform denial-of-service by cancelling tasks created by other users. This vulnerability primarily affects applications built on the MCP TypeScript SDK that utilize the experimental taskStore module.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the MCP TypeScript SDK to version 1.32.0 or later immediately to resolve the session validation flaw.\u003c/li\u003e\n\u003cli\u003eIf upgrading is not immediately possible, audit applications to determine if the experimental taskStore feature is currently in use and if so, evaluate the risk of shared session state within the environment.\u003c/li\u003e\n\u003cli\u003eReview application code that imports the MCP TypeScript SDK to ensure that session isolation logic is enforced at the application layer if relying on the vulnerable taskStore component.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-20T19:45:28Z","date_published":"2026-10-20T19:45:28Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mcp-typescript-sdk-auth-flaw/","summary":"The Model Context Protocol (MCP) TypeScript SDK between versions 1.24.0 and 1.32.0 contains an authorization flaw in the InMemoryTaskStore that permits cross-session unauthorized access to tasks.","title":"Model Context Protocol: MCP TypeScript SDK session isolation vulnerability (CVE-2026-111767)","url":"https://feed.craftedsignal.io/briefs/2026-10-mcp-typescript-sdk-auth-flaw/"}],"language":"en","title":"CraftedSignal Threat Feed - MCP TypeScript SDK (1.24.0-1.31.x)","version":"https://jsonfeed.org/version/1.1"}