CVE-2026-111767
8.6HighPublished 20 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on confidentiality
- Weakness
- CWE-639, CWE-862
Impact
Connected clients can view, list, and cancel tasks belonging to other sessions if they share an InMemoryTaskStore. Attackers only need basic network access to connect to the MCP server.
Root cause
The experimental taskStore feature lacked session checks, failing to restrict task access to the session that created it.
Affected systems
MCP TypeScript SDK versions 1.24.0 through before 1.32.0
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Fix & remediation
Upgrade the MCP TypeScript SDK to version 1.32.0 or later. If patching immediately is not possible, disable the experimental tasks feature (taskStore).
$ npm install @modelcontextprotocol/sdk@^1.32.0AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. This issue has been patched in version 1.32.0.