[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1txNcAIWci7u8eQ18Tl1jxSiB-xJmDa7dMWyB4SdptY":3},{"article":4,"iocs":49,"watch_terms":54,"solutions":55,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"f3a06d67-e6b9-48d0-b0c7-aaccdece308c","Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials","official-mcp-python-sdk-flaw-can-let-malicious-servers-steal-oauth-credentials-c401e2","A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real service, the SDK's maintainers said in a security advisory. Affected versions sent the client secret, the authorization code, and the PKCE proof key to a token endpoint the attacker controlled. The fix is in versions 1.30.0 and","A vulnerability in the official MCP Python SDK allows malicious MCP servers to trick applications into revealing OAuth credentials, including client secrets and authorization codes. The flaw, reported by Cycode, affects specific versions of the SDK when used with certain OAuth providers and can lead to the theft of access tokens with the application's granted permissions. Maintainers have released patches, but some configurations require additional steps for full mitigation.","MCP Python SDK flaw allows malicious servers to steal OAuth credentials.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fofficial-mcp-python-sdk-flaw-can-let.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEh2N5owhsoQXHTQV74afwfngdyitjwcW37BHLX2QKkq6xZAxP8_AOXAh1ODPj5DyvvmMUq3mKH9eR2B1r7owc6djzLViK2U4BY_hw3rTWmaHjhFEyyh8LPlUMPZ7MdWkqN7bjtQyMByBLrsI5m0mAU9y-IbrsAe9OPhZXHN63AWwuv_1OB5MSrpRdVZ9CM\u002Fs1600\u002Fmcp-python.jpg","2026-09-29T06:08:25+00:00","2026-09-29T08:00:21.506342+00:00",8,[17,20,23],{"name":18,"type":19},"MCP Python SDK","product",{"name":21,"type":22},"OAuth","technology",{"name":24,"type":25},"Cycode","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37,42,44],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":43},{"id":26,"icon":28,"name":29,"slug":30},{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",[50],{"type":51,"value":52,"context":53},"mitre_attack","T1539","OAuth Token Interception",[24,18],{"controls":56,"vendors":144},[57,86,115],{"slug":58,"name":59,"problem":60,"products":61},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"slug":87,"name":88,"problem":89,"products":90},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":116,"name":117,"problem":118,"products":119},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[120,128,136],{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",[],{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":161},"mcp-python-sdk-oauth-credential-theft-via-malicious-server-redirect","MCP Python SDK OAuth Credential Theft via Malicious Server Redirect","A vulnerability in the official MCP Python SDK allowed malicious servers to manipulate OAuth flows, tricking client applications into leaking sensitive credentials such as client secrets and authorization codes. This represents a classic OAuth redirect\u002Fhijack class of flaw within a widely-used SDK, meaning any downstream application consuming the library inherited the vulnerability without necessarily knowing it. The risk is compounded because stolen OAuth tokens grant attackers the full permission scope of the compromised application, potentially enabling data exfiltration, account takeover, or lateral movement. This incident underscores the danger of trusting third-party SDKs without rigorous vetting and timely patching processes, especially in authentication-critical code paths.",[150,151,152,153,154,155,156,157,158,159,160],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 16 – Application Software Security","NIST SP 800-53 IA-2 – Identification and Authentication","NIST SP 800-53 SA-15 – Development Process, Standards, and Tools","NIST SP 800-53 SI-2 – Flaw Remediation","NIST SP 800-218 (SSDF) – Secure Software Development Framework","OAuth 2.0 Security Best Current Practice (RFC 9700) – Redirect URI Validation","GDPR Article 32 – Security of Processing","OWASP Top 10 A06:2021 – Vulnerable and Outdated Components","OWASP Top 10 A07:2021 – Identification and Authentication Failures",{}]