MCP Python SDK advisories expose task ownership and browser-origin gaps

Two narrowly scoped advisories show why agent control planes still need ordinary session authorization and transport security.

A dated report connected to the underlying research where available.

Published

Jul 16, 2026

DiggingBeagle

The report

Two 2026 MCP Python SDK advisories show how ordinary service-security mistakes can become agent-control-plane problems.

CVE-2026-52870 affected the opt-in experimental tasks feature. Default handlers did not bind tasks to the session that created them, so another connected client could inspect, retrieve results from or cancel work belonging to a different client. Version 1.27.2 is listed as the fix.

CVE-2026-59950 affected a deprecated WebSocket server transport before 1.28.1. The transport did not apply Host or Origin validation, so a browser could reach a local or LAN MCP service when developers had explicitly wired that deprecated transport.

The scope matters. The tasks issue required experimental tasks to be enabled. The WebSocket issue did not affect FastMCP, stdio, SSE or Streamable HTTP according to the advisory.

Neither case needs an exotic model failure to matter. The control plane still needs session ownership, authentication and transport rules that match the authority of its tools.

Research behind this

Cite this record

DiggingBeagle. “MCP Python SDK advisories expose task ownership and browser-origin gaps.” Published Jul 16, 2026. https://diggingbeagle.com/news/mcp-python-sdk-advisories-expose-task-ownership-and-browser-origin-gaps/

Citation guidance

The source matters after the headline fades.

DiggingBeagle is a non profit research project documenting AI security incidents, agent failures, vulnerabilities and AI-assisted operations. A case keeps its claims beside the sources that support, contest or limit them. Later updates stay visible, so a reader can see when the account changed.

We publish case reconstructions, dated reporting and analysis across records. Each has a different evidentiary role. About the project and our methodology explain how the work is reviewed.