Threats tagged 'brew-kimi-cli-cve-2026-116684'

The Model Context Protocol (MCP) Python SDK versions 1.10.0 through 1.29.1 and 2.0.0 through 2.1.1 have a vulnerability in server-side bearer-token authentication. The SDK does not verify that a token's audience matches the intended server, allowing tokens issued for other services by the same authorization server to be accepted. This can lead to unauthorized access if tokens for different services are accepted. Fixed in versions 1.30.0+ and 2.2.0+, but enabling the audience check requires configuration changes. If upgrading is not possible, manual audience verification is recommended.