cve.now·· 3 天前推荐指数62
MCP Python SDK 跨域重定向泄露凭证漏洞 CVE-2026-116685
CVE-2026-116685: Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
AI 导读
CVE-2026-116685 披露 Model Context Protocol Python SDK 存在跨域重定向凭证泄露问题：streamable_http_client。
来源：cve.now · cve.now