Skip to content
Threat Feed
Subscribe

Vendor

Model Context Protocol

1 brief RSS
high advisory

Java-SDK DNS Rebinding Vulnerability in MCP Server

A DNS rebinding vulnerability exists in java-sdk versions prior to 1.0.0, allowing an attacker to access a locally or network-private java-sdk MCP server via a victim's browser, potentially enabling unauthorized tool calls to the server.

Java SDK +1 dns-rebinding java-sdk mcp cve-2026-35568
2r 2t