CVE-2026-111768

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-111768", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-10-16T17:52:09.082Z", "datePublished": "2026-11-05T21:22:44.119Z", "dateUpdated": "2026-11-09T17:41:55.626Z"}, "containers": {"cna": {"title": "Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation", "problemTypes": [{"descriptions": [{"cweId": "CWE-770", "lang": "en", "description": "CWE-770: Allocation of Resources Without Limits or Throttling", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-46jr-4wx8-v453", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-46jr-4wx8-v453"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2926", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2926"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2927", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2927"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/commit/6d8dbc6cb590edf766fcb66b636ca6b654e99c37", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/6d8dbc6cb590edf766fcb66b636ca6b654e99c37"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0"}], "affected": [{"vendor": "modelcontextprotocol", "product": "typescript-sdk", "versions": [{"version": ">= 1.3.0, < 1.32.0", "status": "affected"}]}, {"vendor": "@modelcontextprotocol", "product": "server", "versions": [{"version": ">= 2.0.0, < 2.3.0", "status": "affected"}]}, {"vendor": "@modelcontextprotocol", "product": "sdk", "versions": [{"version": ">= 1.3.0, < 1.32.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T21:22:44.119Z"}, "descriptions": [{"lang": "en", "value": "The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP servers did not enforce a limit on the number of array elements and object keys validated in one request. The affected surface is validation of HTTP requests containing arrays or object keys. The trigger is an array-element or object-key validation workload large enough to exhaust memory while remaining within the request size limit. A single request within the default 4 MiB limit can terminate the process with JavaScript heap exhaustion. No credentials are required unless the application authenticates before SDK processing. Tools accepting arrays or records carry the greatest risk. stdio-only servers do not expose the HTTP request path. Upgrading alone does not enable the new validation bound. Operators must configure both a tool-input element bound and an appropriate request body size limit. This issue is fixed in @modelcontextprotocol/sdk 1.32.0 and @modelcontextprotocol/server 2.3.0."}], "source": {"advisory": "GHSA-46jr-4wx8-v453", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T17:38:49.133793Z", "id": "CVE-2026-111768", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T17:41:55.626Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-111768", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-09T17:38:49.133793Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T17:38:50.954Z"}}], "cna": {"title": "Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation", "source": {"advisory": "GHSA-46jr-4wx8-v453", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "modelcontextprotocol", "product": "typescript-sdk", "versions": [{"status": "affected", "version": ">= 1.3.0, < 1.32.0"}]}, {"vendor": "@modelcontextprotocol", "product": "server", "versions": [{"status": "affected", "version": ">= 2.0.0, < 2.3.0"}]}, {"vendor": "@modelcontextprotocol", "product": "sdk", "versions": [{"status": "affected", "version": ">= 1.3.0, < 1.32.0"}]}], "references": [{"url": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-46jr-4wx8-v453", "name": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-46jr-4wx8-v453", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2926", "name": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2926", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2927", "name": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2927", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/6d8dbc6cb590edf766fcb66b636ca6b654e99c37", "name": "https://github.com/modelcontextprotocol/typescript-sdk/commit/6d8dbc6cb590edf766fcb66b636ca6b654e99c37", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f", "name": "https://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0", "name": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0", "name": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP servers did not enforce a limit on the number of array elements and object keys validated in one request. The affected surface is validation of HTTP requests containing arrays or object keys. The trigger is an array-element or object-key validation workload large enough to exhaust memory while remaining within the request size limit. A single request within the default 4 MiB limit can terminate the process with JavaScript heap exhaustion. No credentials are required unless the application authenticates before SDK processing. Tools accepting arrays or records carry the greatest risk. stdio-only servers do not expose the HTTP request path. Upgrading alone does not enable the new validation bound. Operators must configure both a tool-input element bound and an appropriate request body size limit. This issue is fixed in @modelcontextprotocol/sdk 1.32.0 and @modelcontextprotocol/server 2.3.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-770", "description": "CWE-770: Allocation of Resources Without Limits or Throttling"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T21:22:44.119Z"}}}, "cveMetadata": {"cveId": "CVE-2026-111768", "state": "PUBLISHED", "dateUpdated": "2026-11-09T17:41:55.626Z", "dateReserved": "2026-10-16T17:52:09.082Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-11-05T21:22:44.119Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "typescript-sdk", "vendor": "modelcontextprotocol", "versions": [{"status": "affected", "version": ">= 1.3.0, < 1.32.0"}]}, {"product": "server", "vendor": "@modelcontextprotocol", "versions": [{"status": "affected", "version": ">= 2.0.0, < 2.3.0"}]}, {"product": "sdk", "vendor": "@modelcontextprotocol", "versions": [{"status": "affected", "version": ">= 1.3.0, < 1.32.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP servers did not enforce a limit on the number of array elements and object keys validated in one request. The affected surface is validation of HTTP requests containing arrays or object keys. The trigger is an array-element or object-key validation workload large enough to exhaust memory while remaining within the request size limit. A single request within the default 4 MiB limit can terminate the process with JavaScript heap exhaustion. No credentials are required unless the application authenticates before SDK processing. Tools accepting arrays or records carry the greatest risk. stdio-only servers do not expose the HTTP request path. Upgrading alone does not enable the new validation bound. Operators must configure both a tool-input element bound and an appropriate request body size limit. This issue is fixed in @modelcontextprotocol/sdk 1.32.0 and @modelcontextprotocol/server 2.3.0."}], "id": "CVE-2026-111768", "lastModified": "2026-11-12T22:18:35.610", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-111768", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T17:38:49.133793Z", "version": "2.0.3"}}]}, "published": "2026-11-05T22:17:45.457", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/6d8dbc6cb590edf766fcb66b636ca6b654e99c37"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2926"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2927"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-46jr-4wx8-v453"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-770"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "@modelcontextprotocol/sdk: @modelcontextprotocol/server: Model Context Protocol TypeScript SDK: Denial of service via memory exhaustion from crafted HTTP requests", "id": "2567540", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567540"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-770", "details": ["A flaw was found in the Model Context Protocol (MCP) TypeScript SDK. A remote, unauthenticated attacker can cause a denial of service (DoS) by sending a crafted HTTP request containing an excessive number of array elements or object keys. Because the server does not enforce limits on element validation, processing this payload exhausts system memory and terminates the application process."], "mitigation": {"lang": "en:us", "value": "To mitigate this vulnerability without applying code changes, implement one or more of the following operational controls:\n1. Restrict transport exposure:\nRun Model Context Protocol services using the stdio transport instead of HTTP where feasible. If HTTP endpoints are required, restrict network access to trusted hosts using network firewall rules or access control lists.\n2. Enforce request body size limits at the reverse proxy or API gateway:\nPlace the application behind a reverse proxy (such as NGINX or Apache HTTP Server) or ingress controller and reduce the maximum permitted request body size to the minimum required for expected traffic. For example, in an upstream NGINX configuration:\n```\nclient_max_body_size 256k;\n```\nWarning: Modifying reverse proxy or firewall configurations may require reloading or restarting the service (for example, `systemctl reload nginx`), which can cause temporary interruptions to active network sessions. Ensure the chosen payload limit is tested to avoid dropping valid application requests."}, "name": "CVE-2026-111768", "package_state": [{"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "package_name": "grafana12.4", "product_name": "Red Hat Hardened Images"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "package_name": "grafana13.1", "product_name": "Red Hat Hardened Images"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "package_name": "grafana13.2", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-11-05T21:22:44Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-111768\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-111768\nhttps://github.com/modelcontextprotocol/typescript-sdk/commit/6d8dbc6cb590edf766fcb66b636ca6b654e99c37\nhttps://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f\nhttps://github.com/modelcontextprotocol/typescript-sdk/pull/2926\nhttps://github.com/modelcontextprotocol/typescript-sdk/pull/2927\nhttps://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0\nhttps://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0\nhttps://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-46jr-4wx8-v453"], "statement": "This vulnerability is rated as having Important impact because an unauthenticated remote attacker can trigger complete service unavailability through process termination via a single HTTP request that conforms to default body size limits. Deployments utilizing the stdio transport are unaffected, as the vulnerability is strictly confined to HTTP-based transport mechanisms. In environments exposing HTTP endpoints, the risk is elevated when services expose tools accepting array or dictionary structures without preceding upstream authentication or strict reverse-proxy payload size constraints.", "threat_severity": "Important"}

{"created": "2026-11-05T22:30:17.931659+00:00", "updated": "2026-11-05T22:30:17.931666+00:00", "vendors": []}