{"id":"ghsa-ghsa-w4fh-qvv9-3v23","seq":1711757,"kind":"advisory","title":"Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server","url":"https://github.com/advisories/GHSA-w4fh-qvv9-3v23","permalink":"https://vulnpulse.app/items/ghsa-ghsa-w4fh-qvv9-3v23","summary":"影響: pip:mcp >= 2.0.0, < 2.2.0 → 2.2.0, pip:mcp >= 1.10.0, < 1.30.0 → 1.30.0\nIn affected versions, the SDK's server-side bearer authentication had no way to check that a token was issued for your server (its audience). Where one authorization server issues tokens for several services, a valid token for another service was also accepted by your MCP server. Am I affected? Yes, if your HTTP server uses the SDK's bearer authentication (auth=AuthSettings(...) with token_verifier=), its authorization server also issues tokens for other services, and your TokenVerifier does no…","severity":"medium","techs":["python"],"cves":["CVE-2026-116684"],"tags":["GHSA-w4fh-qvv9-3v23","mcp","mcp"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T21:06:59.000Z","fetched_at":"2026-10-27T21:17:52.472Z"}