A security flaw in the official Python SDK for the Model Context Protocol (MCP) can let a malicious MCP server steal OAuth credentials from people or organizations that connect to it. The issue affects the official MCP Python SDK and involves improper handling of OAuth flows between clients and servers; a rogue server can abuse the authentication process to capture tokens that grant access to connected accounts or services. The article text provided does not include a CVE identifier or confirmed fixed versions.
Why it matters: Developers and companies using MCP-based tools could unknowingly hand over account access to a malicious server, turning a normal integration into an account-compromise path. This is urgent for anyone using the Python SDK: review vendor guidance, update if a fix is available, and avoid connecting sensitive accounts to untrusted MCP servers.
info@thehackernews.com (The Hacker News)
2026.09.29
100% relevant
This article appears to be the initial report establishing a distinct vulnerability in the official MCP Python SDK and its OAuth credential-handling behavior.
← Back to all stories