CVE-2026-34237 in modelcontextprotocol java-sdk

요약 (영어)

MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 1.0.1 and 1.1.1, there is a hardcoded wildcard CORS vulnerability. This issue has been patched in versions 1.0.1 and 1.1.1.

책임이 있는

GitHub_M

예약하다

2026. 03. 26.

공개

2026. 03. 31.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
354435	modelcontextprotocol java-sdk 권한 상승	942	정의되지 않음	공식 수정	CVE-2026-34237