Tools AI Risk Radar ai-incident-0240
Incident record
Shared MCP server objects could mix clients’ messages
- Severity
- High
- Status
- Patched
- Type
- Infra Vuln
- Target
- modelcontextprotocol/typescript-sdk
- Actor
- researcher
- CVE
- CVE-2026-111770
What happened
A server reused across HTTP clients could deliver one client’s responses or notifications to another.
The maintainer lists @modelcontextprotocol/server 2.3.0 as the fixed version. Applications also need a new server and transport per request or session, or a factory that creates them. Upgrading an application that still shares instances can cause requests to fail.
Sources
- Maintainer security advisorygithub.com/modelcontextprotocol/typescript-sdk/security/advi…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026