High severity · published Oct 20, 2026
CVE-2026-111767
MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
8.6
CVSS
0.3%
EPSS
No
On KEV
Description
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. This issue has been patched in version 1.32.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TY
typescript-sdk · modelcontextprotocol
>= 1.24.0, < 1.32.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-111767
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-111767
github.com
https://github.com/modelcontextprotocol/typescript-sdk/commit/727075b5bbeb77fbea22041b36b72a73042160fa
github.com
https://github.com/modelcontextprotocol/typescript-sdk/pull/2925
github.com
https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-22jm-h49p-29qw
More from typescript-sdk
8.1
CVE-2025-66414
DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost
7.5
CVE-2026-104850
MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server
7.1
CVE-2026-25536
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse