The Hacker News

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.
cyberpress

MCP Python SDK OAuth Flaw Lets Malicious Servers Steal Credentials and Take Over Accounts

Cycode has disclosed a high-severity OAuth vulnerability in Anthropic’s official Model Context Protocol (MCP) Python SDK that ...
BitNewsBot

MCP Python SDK OAuth flaw lets attackers steal credentials

A critical security flaw in the official MCP Python SDK could allow a malicious MCP server to steal OAuth credentials used to log in to real services, ...
Cyber Security News

MCP Python SDK OAuth Flaw Lets Malicious Servers Hijack AI Agent Accounts

Python SDK could allow a malicious MCP server to steal OAuth authentication material and take over AI agent accounts. The ...