{"id":"CVE-2026-111767","title":"@modelcontextprotocol/sdk: @modelcontextprotocol/sdk: Unauthorized cross-session task access via taskStore (CVE-2026-111767)","summary":"A flaw was found in the Model Context Protocol (MCP) TypeScript SDK (@modelcontextprotocol/sdk). The experimental task storage feature (taskStore) does not verify which client session created a given task when multiple clients share a task…","severity":"high","cvss":8.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvssSource":"vendor","cwe":["CWE-639","CWE-862"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","affected":["migration_toolkit_for_applications 8","ansible_automation_platform 2","enterprise_linux 10","openshift_ai_rhoai","openshift_dev_spaces"],"patched":["@modelcontextprotocol/sdk 1.32.0"],"published":"2026-10-20","updated":"2026-10-21","sourceUpdated":"2026-10-21T03:43:40+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111767.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111767.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-111767"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556388"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-111767"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111767"},{"url":"https://github.com/modelcontextprotocol/typescript-sdk/commit/727075b5bbeb77fbea22041b36b72a73042160fa"},{"url":"https://github.com/modelcontextprotocol/typescript-sdk/pull/2925"},{"url":"https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-22jm-h49p-29qw"},{"url":"https://github.com/advisories/GHSA-22jm-h49p-29qw"}],"tags":["csaf","vex","red-hat","cve.org","ghsa","npm"],"aliases":["GHSA-22jm-h49p-29qw"],"ecosystem":"npm","ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-20T19:02:29.851772Z"},"ingestedAt":"2026-10-20T19:16:14.376Z","epss":0.00345,"epssPercentile":0.27843,"slug":"CVE-2026-111767","body":"## Overview\n\nA flaw was found in the Model Context Protocol (MCP) TypeScript SDK (@modelcontextprotocol/sdk). The experimental task storage feature (taskStore) does not verify which client session created a given task when multiple clients share a task store. A remote attacker sharing the same server instance can exploit this flaw to list, read, and cancel tasks created by other sessions. This results in unauthorized information disclosure and disruption of task processing.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: Migration Toolkit for Applications 8, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 10, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Dev Spaces · no fix planned: Migration Toolkit for Applications 8, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 10, Red Hat OpenShift AI (RHOAI), … · updated 2026-10-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111767.json)\n\n**@modelcontextprotocol/sdk: @modelcontextprotocol/sdk: Unauthorized cross-session task access via taskStore** — rated Important by Red Hat. Released 2026-10-20, updated 2026-10-21.\n\nAffected:\n\n- Migration Toolkit for Applications 8\n- Red Hat Ansible Automation Platform 2\n- Red Hat Enterprise Linux 10\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenShift Dev Spaces\n\nNo fix planned:\n\n- Migration Toolkit for Applications 8\n- Red Hat Ansible Automation Platform 2\n- Red Hat Enterprise Linux 10\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenShift Dev Spaces\n\nNot affected:\n\n- Red Hat Hardened Images\n\n## Remediation\n\nAffected\n\n## Package advisory (CVE-2026-111767)\n\nAffected packages:\n\n- `@modelcontextprotocol/sdk >= 1.24.0, < 1.32.0`\n\nPatched in:\n\n- `@modelcontextprotocol/sdk 1.32.0`\n\nSource: https://github.com/advisories/GHSA-22jm-h49p-29qw","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":47.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}