Advisoriesby IbisMCP SDKsGHSA-3qhf-m339-9g5v
MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS
Fix: upgrade to 1.9.4 or later
A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability (500 errors) until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures.
Thank you to Rich Harang for reporting this issue.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| mcp PyPI | < 1.9.4 | 1.9.4 |
Details and references
- CVSS 4.0
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-248
- Also known as
- CVE-2025-53366, PYSEC-2026-1616
- github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-3qhf-m339-9g5v
- nvd.nist.gov/vuln/detail/CVE-2025-53366
- github.com/modelcontextprotocol/python-sdk/pull/822
- github.com/modelcontextprotocol/python-sdk/commit/29c69e6a47d0104d0afcea6ac35e7ab02fde809a
- github.com/advisories/GHSA-3qhf-m339-9g5v
- github.com/modelcontextprotocol/python-sdk
- github.com/modelcontextprotocol/python-sdk/releases/tag/v1.9.4
- github.com/pypa/advisory-database/tree/main/vulns/mcp/PYSEC-2026-1616.yaml
- pypi.org/project/mcp
More MCP SDKs advisories
All MCP SDKs
MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasksCVE-2026-52870fixed in 1.27.2@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuseCVE-2026-25536fixed in 1.26.0Anthropic's MCP TypeScript SDK has a ReDoS vulnerabilityCVE-2026-0621fixed in 1.25.2Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by defaultCVE-2025-66416fixed in 1.23.0Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by defaultCVE-2025-66414fixed in 1.24.0MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of ServiceCVE-2025-53365fixed in 1.10.0