vulnerability
72
Resmi MCP Python SDK Kusuru Kötü Niyetli Sunucuların OAuth Kimlik Bilgilerini Çalmasına İzin Veriyor
Official MCP Python SDK flaw could let malicious servers steal OAuth credentials by exfiltrating client secret, authorization code, and PKCE code_verifier to attacker-controlled token endpoint; fix is in version 1.30.0+.
29.09.2026 09:08
The Hacker News
US
cybersecurity
malware
authentication