Threats tagged 'brew-omnara-cve-2026-116685'

The Model Context Protocol (MCP) Python SDK versions 1.8.0 through 1.29.1 and 2.0.0 through 2.1.1 have a vulnerability where their HTTP client transports follow cross-origin HTTP redirects, sending custom headers and, on 307/308 redirects, the request body to the redirected host. This can expose sensitive headers such as X-API-Key to unintended origins if an attacker can cause a trusted endpoint to redirect to a malicious host. The Authorization bearer header is not exposed due to existing HTTP library protections. The issue affects SDK clients using HTTP with follow_redirects enabled. Fixed in versions 1.30.0 and 2.2.0, the SDK now restricts redirects to the same origin or http to https upgrades on the same host, failing otherwise.