CVE-2026-111769

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-111769", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-10-16T17:52:09.082Z", "datePublished": "2026-11-05T21:19:36.708Z", "dateUpdated": "2026-11-09T18:40:50.721Z"}, "containers": {"cna": {"title": "Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies", "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "lang": "en", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-6prh-2h8m-c8cw", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-6prh-2h8m-c8cw"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2901", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2901"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2902", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2902"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/commit/30bfe5139f4b0825c90cd725f9a7e3f9af5e120d", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/30bfe5139f4b0825c90cd725f9a7e3f9af5e120d"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/commit/433eb413dc305ebeb93b8ebcde0095a8fc0d5fa0", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/433eb413dc305ebeb93b8ebcde0095a8fc0d5fa0"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0"}, {"name": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0"}], "affected": [{"vendor": "modelcontextprotocol", "product": "typescript-sdk", "versions": [{"version": "< 1.32.0", "status": "affected"}]}, {"vendor": "@modelcontextprotocol", "product": "sdk", "versions": [{"version": "< 1.32.0", "status": "affected"}]}, {"vendor": "@modelcontextprotocol", "product": "client", "versions": [{"version": ">= 2.0.0, < 2.3.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T21:19:36.708Z"}, "descriptions": [{"lang": "en", "value": "The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. Prior to 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/client, the HTTP client transports and OAuth client requests followed redirects to a different origin while retaining custom request headers and, for HTTP 307 or 308 responses, request bodies. The affected surfaces are StreamableHTTPClientTransport, SSEClientTransport, and OAuth client functions such as auth(). The trigger is an HTTP redirect to another origin. Custom headers and mcp-session-id can be re-sent to the redirected origin. HTTP 307 and 308 redirects can also re-send the request body. OAuth request bodies can contain refresh_token and client_secret values. Current runtimes already strip the Authorization header across origins. stdio clients do not use the affected HTTP path. A malicious or compromised MCP or authorization server could therefore receive API keys, session identifiers, OAuth refresh tokens, or OAuth client secrets. Restoring unrestricted redirect following after upgrading restores the exposure. This issue is fixed in @modelcontextprotocol/sdk 1.32.0 and @modelcontextprotocol/client 2.3.0."}], "source": {"advisory": "GHSA-6prh-2h8m-c8cw", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T18:39:42.557072Z", "id": "CVE-2026-111769", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T18:40:50.721Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-111769", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-09T18:39:42.557072Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T18:39:47.142Z"}}], "cna": {"title": "Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies", "source": {"advisory": "GHSA-6prh-2h8m-c8cw", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "modelcontextprotocol", "product": "typescript-sdk", "versions": [{"status": "affected", "version": "< 1.32.0"}]}, {"vendor": "@modelcontextprotocol", "product": "sdk", "versions": [{"status": "affected", "version": "< 1.32.0"}]}, {"vendor": "@modelcontextprotocol", "product": "client", "versions": [{"status": "affected", "version": ">= 2.0.0, < 2.3.0"}]}], "references": [{"url": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-6prh-2h8m-c8cw", "name": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-6prh-2h8m-c8cw", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2901", "name": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2901", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2902", "name": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2902", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/30bfe5139f4b0825c90cd725f9a7e3f9af5e120d", "name": "https://github.com/modelcontextprotocol/typescript-sdk/commit/30bfe5139f4b0825c90cd725f9a7e3f9af5e120d", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/433eb413dc305ebeb93b8ebcde0095a8fc0d5fa0", "name": "https://github.com/modelcontextprotocol/typescript-sdk/commit/433eb413dc305ebeb93b8ebcde0095a8fc0d5fa0", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0", "name": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0", "name": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. Prior to 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/client, the HTTP client transports and OAuth client requests followed redirects to a different origin while retaining custom request headers and, for HTTP 307 or 308 responses, request bodies. The affected surfaces are StreamableHTTPClientTransport, SSEClientTransport, and OAuth client functions such as auth(). The trigger is an HTTP redirect to another origin. Custom headers and mcp-session-id can be re-sent to the redirected origin. HTTP 307 and 308 redirects can also re-send the request body. OAuth request bodies can contain refresh_token and client_secret values. Current runtimes already strip the Authorization header across origins. stdio clients do not use the affected HTTP path. A malicious or compromised MCP or authorization server could therefore receive API keys, session identifiers, OAuth refresh tokens, or OAuth client secrets. Restoring unrestricted redirect following after upgrading restores the exposure. This issue is fixed in @modelcontextprotocol/sdk 1.32.0 and @modelcontextprotocol/client 2.3.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T21:19:36.708Z"}}}, "cveMetadata": {"cveId": "CVE-2026-111769", "state": "PUBLISHED", "dateUpdated": "2026-11-09T18:40:50.721Z", "dateReserved": "2026-10-16T17:52:09.082Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-11-05T21:19:36.708Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "typescript-sdk", "vendor": "modelcontextprotocol", "versions": [{"status": "affected", "version": "< 1.32.0"}]}, {"product": "sdk", "vendor": "@modelcontextprotocol", "versions": [{"status": "affected", "version": "< 1.32.0"}]}, {"product": "client", "vendor": "@modelcontextprotocol", "versions": [{"status": "affected", "version": ">= 2.0.0, < 2.3.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. Prior to 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/client, the HTTP client transports and OAuth client requests followed redirects to a different origin while retaining custom request headers and, for HTTP 307 or 308 responses, request bodies. The affected surfaces are StreamableHTTPClientTransport, SSEClientTransport, and OAuth client functions such as auth(). The trigger is an HTTP redirect to another origin. Custom headers and mcp-session-id can be re-sent to the redirected origin. HTTP 307 and 308 redirects can also re-send the request body. OAuth request bodies can contain refresh_token and client_secret values. Current runtimes already strip the Authorization header across origins. stdio clients do not use the affected HTTP path. A malicious or compromised MCP or authorization server could therefore receive API keys, session identifiers, OAuth refresh tokens, or OAuth client secrets. Restoring unrestricted redirect following after upgrading restores the exposure. This issue is fixed in @modelcontextprotocol/sdk 1.32.0 and @modelcontextprotocol/client 2.3.0."}], "id": "CVE-2026-111769", "lastModified": "2026-11-12T22:18:51.470", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 4.2, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-111769", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T18:39:42.557072Z", "version": "2.0.3"}}]}, "published": "2026-11-05T22:17:45.637", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/30bfe5139f4b0825c90cd725f9a7e3f9af5e120d"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/commit/433eb413dc305ebeb93b8ebcde0095a8fc0d5fa0"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2901"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/pull/2902"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-6prh-2h8m-c8cw"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "@modelcontextprotocol/sdk: @modelcontextprotocol/client: Model Context Protocol TypeScript SDK: Sensitive information disclosure via cross-origin redirects", "id": "2567697", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567697"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "status": "draft"}, "cwe": "CWE-212", "details": ["A flaw was found in the Model Context Protocol (MCP) TypeScript SDK. The HTTP client transports and OAuth client mechanisms follow cross-origin redirects without stripping custom request headers or request bodies. A malicious or compromised server could redirect client requests to an untrusted destination, leading to the disclosure of sensitive information such as session identifiers, API keys, and OAuth credentials."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-111769", "package_state": [{"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "package_name": "grafana12.4", "product_name": "Red Hat Hardened Images"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "package_name": "grafana13.1", "product_name": "Red Hat Hardened Images"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "package_name": "grafana13.2", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-11-05T21:19:36Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-111769\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-111769\nhttps://github.com/modelcontextprotocol/typescript-sdk/commit/30bfe5139f4b0825c90cd725f9a7e3f9af5e120d\nhttps://github.com/modelcontextprotocol/typescript-sdk/commit/433eb413dc305ebeb93b8ebcde0095a8fc0d5fa0\nhttps://github.com/modelcontextprotocol/typescript-sdk/pull/2901\nhttps://github.com/modelcontextprotocol/typescript-sdk/pull/2902\nhttps://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0\nhttps://github.com/modelcontextprotocol/typescript-sdk/releases/tag/@modelcontextprotocol/server@2.3.0\nhttps://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-6prh-2h8m-c8cw"], "statement": "This vulnerability is rated as Moderate severity because exploitation requires an application to interact with an untrusted or compromised remote server that deliberately issues a cross-origin HTTP redirect. While standard transport mechanisms like stdio remain unaffected and contemporary runtimes automatically remove authorization headers, custom request headers and request payloads may still be inadvertently transmitted to third-party endpoints during HTTP redirect sequences. Consequently, sensitive session tokens or client secrets could be disclosed only when communicating with hostile external services.", "threat_severity": "Moderate"}

{"created": "2026-11-05T22:30:17.931825+00:00", "updated": "2026-11-06T13:30:05.089752+00:00", "vendors": [], "weaknesses": ["CWE-200", "CWE-212"]}