---
id: CVE-2026-111767
title: >-
  @modelcontextprotocol/sdk: @modelcontextprotocol/sdk: Unauthorized
  cross-session task access via taskStore (CVE-2026-111767)
summary: >-
  A flaw was found in the Model Context Protocol (MCP) TypeScript SDK
  (@modelcontextprotocol/sdk). The experimental task storage feature (taskStore)
  does not verify which client session created a given task when multiple
  clients share a task…
severity: high
cvss: 8.6
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L'
cvssSource: vendor
cwe:
  - CWE-639
  - CWE-862
vendor: Red Hat
product: Red Hat Enterprise Linux 10
affected:
  - migration_toolkit_for_applications 8
  - ansible_automation_platform 2
  - enterprise_linux 10
  - openshift_ai_rhoai
  - openshift_dev_spaces
patched:
  - '@modelcontextprotocol/sdk 1.32.0'
published: '2026-10-20'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T03:43:40+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111767.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111767.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-111767'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2556388'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-111767'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-111767'
  - url: >-
      https://github.com/modelcontextprotocol/typescript-sdk/commit/727075b5bbeb77fbea22041b36b72a73042160fa
  - url: 'https://github.com/modelcontextprotocol/typescript-sdk/pull/2925'
  - url: >-
      https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-22jm-h49p-29qw
  - url: 'https://github.com/advisories/GHSA-22jm-h49p-29qw'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
  - ghsa
  - npm
aliases:
  - GHSA-22jm-h49p-29qw
ecosystem: npm
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-20T19:02:29.851772Z'
ingestedAt: '2026-10-20T19:16:14.376Z'
epss: 0.00345
epssPercentile: 0.27843
---

## Overview

A flaw was found in the Model Context Protocol (MCP) TypeScript SDK (@modelcontextprotocol/sdk). The experimental task storage feature (taskStore) does not verify which client session created a given task when multiple clients share a task store. A remote attacker sharing the same server instance can exploit this flaw to list, read, and cancel tasks created by other sessions. This results in unauthorized information disclosure and disruption of task processing.

## Vendor advisories

- **Red Hat VEX** · Important · affected: Migration Toolkit for Applications 8, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 10, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Dev Spaces · no fix planned: Migration Toolkit for Applications 8, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 10, Red Hat OpenShift AI (RHOAI), … · updated 2026-10-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111767.json)

**@modelcontextprotocol/sdk: @modelcontextprotocol/sdk: Unauthorized cross-session task access via taskStore** — rated Important by Red Hat. Released 2026-10-20, updated 2026-10-21.

Affected:

- Migration Toolkit for Applications 8
- Red Hat Ansible Automation Platform 2
- Red Hat Enterprise Linux 10
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift Dev Spaces

No fix planned:

- Migration Toolkit for Applications 8
- Red Hat Ansible Automation Platform 2
- Red Hat Enterprise Linux 10
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift Dev Spaces

Not affected:

- Red Hat Hardened Images

## Remediation

Affected

## Package advisory (CVE-2026-111767)

Affected packages:

- `@modelcontextprotocol/sdk >= 1.24.0, < 1.32.0`

Patched in:

- `@modelcontextprotocol/sdk 1.32.0`

Source: https://github.com/advisories/GHSA-22jm-h49p-29qw