An improper validation issue exists in the MCP OAuth login flow. The system uses server-supplied Protected Resource Metadata as the resource indicator without verifying that it matches the configured server URL. This allows a malicious MCP server to declare a different resource on the same authorization server, obtain the user's bearer token for that resource, and subsequently replay the token against it.