vulnerability · DiggingBeagle record
Host/Origin validation gap in the MCP Python SDK deprecated WebSocket server transport.
A relationship records context, not guilt, vulnerability or endorsement.
Affected versions before 1.28.1; patched in 1.28.1.
DiggingBeagle. “CVE-2026-59950.” https://diggingbeagle.com/entities/cve-2026-59950/
Citation guidanceWhy this archive exists
DiggingBeagle is a non profit research project documenting AI security incidents, agent failures, vulnerabilities and AI-assisted operations. A case keeps its claims beside the sources that support, contest or limit them. Later updates stay visible, so a reader can see when the account changed.
We publish case reconstructions, dated reporting and analysis across records. Each has a different evidentiary role. About the project and our methodology explain how the work is reviewed.