PT-2025-48747 · Mcp · Mcp

Published 2025-12-02 · Updated 2026-03-10 · CVE-2025-66416

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions mcp versions prior to 1.23.0

Description The mcp Python SDK does not enable DNS rebinding protection by default for HTTP-based servers. If an HTTP-based MCP server is running on localhost without authentication, using FastMCP with streamable HTTP or SSE transport, and without TransportSecuritySettings configured, a malicious website could exploit DNS rebinding to bypass same-origin policy restrictions. This could allow an attacker to send requests to the local MCP server and potentially invoke tools or access resources exposed by the server on behalf of the user. This issue does not affect servers using stdio transport.

Recommendations Update to version 1.23.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-1188

CWE-350

Related Identifiers

CVE-2025-66416

GHSA-9H52-P55H-VW2F

Affected Products

Mcp

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66416.json · Exploit
• https://github.com/modelcontextprotocol/python-sdk/commit/d3a184119e4479ea6a63590bc41f01dc06e3fa99 · Patch
• https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-9h52-p55h-vw2f · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9h52-p55h-vw2f · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-66416 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-66416 · Security Note
• https://osv.dev/vulnerability/ROOT-APP-PYPI-CVE-2025-66416 · Vendor Advisory
• https://github.com/modelcontextprotocol/python-sdk · Note
• https://twitter.com/dailycve/status/2004699210495787440 · Twitter Post
• https://t.me/CVEtracker/38708 · Telegram Post
• https://t.me/cveNotify/154961 · Telegram Post
• https://twitter.com/CVEnew/status/1995929995709911407 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1pchx5n/resumen_diario_de_vulnerabilidades_02122025 · Reddit Post