"A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to ...

Python SDK could allow a malicious MCP server to steal OAuth authentication material and take over AI agent accounts. The ...

MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.

A critical security flaw in the official MCP Python SDK could allow a malicious MCP server to steal OAuth credentials used to log in to real services, ...

Cycode has disclosed a high-severity OAuth vulnerability in Anthropic’s official Model Context Protocol (MCP) Python SDK that ...

Pythonic Model Context Protocol servers handle tool calls, session events, module imports, and subprocess activity. BlueRock has released MCP Python Hooks, an open source runtime sensor that gives ...