Tools AI Risk Radar ai-incident-0235
Incident record
MCP Python servers could accumulate sessions until memory ran out
- Severity
- High
- Status
- Patched
- Type
- Infra Vuln
- Target
- MCP Python SDK stateful Streamable HTTP
- Actor
- researcher
- CVE
- CVE-2026-59951
What happened
A client able to reach a stateful MCP endpoint could keep opening sessions and consume server memory through ordinary requests.
The maintainer lists affected versions 1.8.0–1.29.1 and 2.0.0–2.1.1. Fixes in 1.30.0 and 2.2.0 add session expiry, cleanup and a session limit. Exposure depends on reachable stateful Streamable HTTP endpoints.
Sources
- Maintainer security advisorygithub.com/modelcontextprotocol/python-sdk/security/advisori…
- GitHub reviewed advisorygithub.com/advisories/GHSA-84m7-p3x7-pcfv
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026