vulnerability · DiggingBeagle record
CVE-2026-52870
Cross-client task authorization vulnerability in the MCP Python SDK experimental tasks feature.
- Entity kind
- vulnerability
Record description
Affected mcp 1.23.0 through 1.27.1; patched in 1.27.2.
vulnerability · DiggingBeagle record
Cross-client task authorization vulnerability in the MCP Python SDK experimental tasks feature.
Affected mcp 1.23.0 through 1.27.1; patched in 1.27.2.