PT-2025-42788 · Oatpp-Mcp · Oatpp-Mcp

Published 2025-10-20 · Updated 2026-01-09 · CVE-2025-6515

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions oatpp-mcp (affected versions not specified)

Description The MCP SSE endpoint returns an instance pointer as the session ID, which is not unique or cryptographically secure. This allows network attackers with access to the oatpp-mcp server to guess future session IDs and hijack legitimate client MCP sessions, potentially resulting in malicious responses from the oatpp-mcp server. The vulnerable endpoint is /MCP SSE. The session ID is not sufficiently random, enabling session hijacking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2025-6515

Affected Products

Oatpp-Mcp

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-6515 · Security Note
• https://twitter.com/AISecHub/status/1981474854722556382 · Twitter Post
• https://twitter.com/jfrog/status/1981508190639473010 · Twitter Post
• https://t.me/CVEtracker/35309 · Telegram Post
• https://twitter.com/jade_banzuelo/status/1982261850143432922 · Twitter Post
• https://twitter.com/grok/status/1992778972426612994 · Twitter Post
• https://i.redd.it/p3uex4b52dxf1.jpeg · Reddit Post
• https://twitter.com/CVEnew/status/1980314883179835835 · Twitter Post
• https://twitter.com/jade_banzuelo/status/1982262253895491933 · Twitter Post
• https://twitter.com/jfrog/status/2009669531560468746 · Twitter Post
• https://twitter.com/jfrog/status/2006085655340679373 · Twitter Post
• https://research.jfrog.com/vulnerabilities/oatpp-mcp-prompt-hijacking-jfsa-2025-001494691 · Note
• https://twitter.com/VulmonFeeds/status/1980426996548046968 · Twitter Post