CVE-2026-108395

Name of the Vulnerable Software and Affected Versions io.modelcontextprotocol.sdk:mcp versions 0.8.0 through 0.12.0 io.modelcontextprotocol.sdk:mcp-core versions 0.13.0 through 0.18.3 io.modelcontextprotocol.sdk:mcp-core versions 1.0.0 through 1.1.3 io.modelcontextprotocol.sdk:mcp-core versions 2.0.0-M1 through 2.0.0

Description Servlet-based SSE, Streamable HTTP, and Stateless server transports read an HTTP request body into memory without enforcing a maximum size. An unauthenticated remote client can stream an arbitrarily large POST body, potentially using chunked transfer encoding, which may lead to the exhaustion of the Java process heap and cause the system to become unavailable. This issue can be mitigated if authentication, Origin or Host validation, or an upstream request-size limit is in place to reject the request before the read operation occurs.

Recommendations Update io.modelcontextprotocol.sdk:mcp-core to version 0.18.4 Update io.modelcontextprotocol.sdk:mcp-core to version 1.1.4 Update io.modelcontextprotocol.sdk:mcp-core to version 2.0.1 At the moment, there is no information about a newer version that contains a fix for this vulnerability for io.modelcontextprotocol.sdk:mcp versions 0.8.0 through 0.12.0.