Auth bypass in Lfprojects Mcp Python Sdk
CVE-2026-52870
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.23.0 until 1.27.2, default handlers installed by server.experimental.enable_tasks() for tasks/list, tasks/get, tasks/result, and tasks/cancel operate only on task identifiers without recording the session that created each task, allowing any connected client to enumerate, read results from, consume messages for, or cancel other clients' tasks. This issue is fixed in version 1.27.2.
Vulnerability class: Broken Access Control
EPSS: 0.004 (31.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L.
Affected products
- Lfprojects Mcp_python_sdk
- Modelcontextprotocol Python-sdk — versions >= 1.23.0, < 1.27.2
Weakness classification (CWE)
References
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com (Patch, x_refsource_MISC, Issue Tracking)
- security-advisories@github.com (x_refsource_MISC, Release Notes)
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-52870?
- CVE-2026-52870 is a high-severity vulnerability in Lfprojects Mcp Python Sdk, classified under Missing Authorization. CVSS score: 7.6/10. Published 2026-07-15.
- How severe is CVE-2026-52870?
- High severity. CVSS v3 base score is 7.6 out of 10.