Cycode Uncovers Account Takeover in Anthropic’s MCP Python SDK

cycode.com · 2026-09-29 · by Long Nguyen ·generic

We found a High-severity flaw (7.5) in MCP Python SDK versions 1.9.1–2.1.1 that let attackers steal OAuth credentials via a fake login provider. Here's the full breakdown and fix.

Cycode Uncovers Account Takeover in Anthropic’s MCP Python SDK

cycode.com · 2 images · 112 links

Comments (0)

No comments yet