English(EN) Whose response is this? The MCP server SDK that matched replies by id alone

Critical @modelcontextprotocol/server SDK 漏洞暴露客户端数据

作者 PulseAugur 编辑部 · [1 个来源] · 2026-10-21 11:11

在 @modelcontextprotocol/server SDK 中发现了一个严重漏洞 CVE-2026-111770，影响版本 2.0.0 至 2.2.0。该漏洞允许当共享同一个 HTTP MCP 服务器实例时，一个客户端接收到另一个客户端的回复或通知。当多个客户端从零开始请求时，由于消息仅通过 JSON-RPC ID 进行匹配，可能发生冲突，从而导致此竞态条件。该问题被评定为高危（CVSS 评分为 7.7），已在版本 2.3.0 中修复，归功于开发者 DavidCarliez 和 legitu1337。 AI

影响此漏洞凸显了服务器 SDK 中共享状态的风险，可能影响依赖 MCP 协议进行 AI 代理通信的开发者。

排序理由特定 SDK 的安全漏洞披露。

在 dev.to — MCP tag 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。我们如何撰写摘要 →

Critical @modelcontextprotocol/server SDK 漏洞暴露客户端数据

本文如何被排名

Signal score: 0 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; 特定 SDK 的安全漏洞披露。
Source corroboration: Single-source cluster; Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics: product, safety; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: 3 days old; Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

完整方法见我们的编辑标准。

报道来源 [1]

dev.to — MCP tag TIER_1 English(EN) · Actionable Vectors · 2026-10-21 11:11

Whose response is this? The MCP server SDK that matched replies by id alone

<h1> Whose response is this? The MCP server SDK that matched replies by id alone </h1> <p><em>A vector breakdown of CVE-2026-111770 / GHSA-jm63-cq47-j5jp (<code>@modelcontextprotocol/server</code> 2.0.0 through 2.2.0, fixed in 2.3.0)</em></p> <p>No injection, no stolen token. Two…

本文如何被排名

报道来源 [1]

Whose response is this? The MCP server SDK that matched replies by id alone

相关实体

相关话题