CVE-2026-111767
MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. This issue has been patched in version 1.32.0.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. This issue has been patched in version 1.32.0.
- Record
CVE-2026-111767- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - Weakness
- CWE-639, CWE-862
- Updated
- 2026-11-02
EUVDEUVD-2026-105256
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. This issue has been patched in version 1.32.0.
- Record
EUVD-2026-105256- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-22jm-h49p-29qw
MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
Summary
In affected versions, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks.
Experimental tasks are deprecated. The 2026-07-28 specification replaced them with a redesigned extension. The best course of action is to stop using them.
Am I affected?
Only if your HTTP server passes taskStore to McpServer or Server. If grep -ri taskstore --exclude-dir=node_modules . finds nothing, you are not affected.
Affected versions: @modelcontextprotocol/sdk 1.24.0 through 1.31.0. The 2.x packages are not affected.
Fix
Upgrade to @modelcontextprotocol/sdk 1.32.0 or later. Each task is now tied to the session that created it, so a client that starts a new session can no longer reach its earlier tasks.
If you cannot upgrade yet, remove taskStore, or create one InMemoryTaskStore per session.
- Record
GHSA-22jm-h49p-29qw- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - Weakness
- CWE-639, CWE-862
- Updated
- 2026-11-02
NVD
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. This issue has been patched in version 1.32.0.
- Record
CVE-2026-111767- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - Weakness
- CWE-639, CWE-862
- Updated
- 2026-11-02
OSV
MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. This issue has been patched in version 1.32.0.
- Record
CVE-2026-111767- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - Weakness
- CWE-639, CWE-862
- Updated
- 2026-11-02
OSVGHSA-22jm-h49p-29qw
MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
Summary
In affected versions, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks.
Experimental tasks are deprecated. The 2026-07-28 specification replaced them with a redesigned extension. The best course of action is to stop using them.
Am I affected?
Only if your HTTP server passes taskStore to McpServer or Server. If grep -ri taskstore --exclude-dir=node_modules . finds nothing, you are not affected.
Affected versions: @modelcontextprotocol/sdk 1.24.0 through 1.31.0. The 2.x packages are not affected.
Fix
Upgrade to @modelcontextprotocol/sdk 1.32.0 or later. Each task is now tied to the session that created it, so a client that starts a new session can no longer reach its earlier tasks.
If you cannot upgrade yet, remove taskStore, or create one InMemoryTaskStore per session.
- Record
GHSA-22jm-h49p-29qw- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - Weakness
- CWE-639, CWE-862
- Updated
- 2026-11-02
Show 7 moreShow less
OSVCLSA-2026-1792574765 No score
TuxCare security update for @modelcontextprotocol/sdk (2 CVEs)
TuxCare rebuilt @modelcontextprotocol/sdk to address 2 CVEs. Fixed in 1.30.1-tuxcare.2.
- Record
CLSA-2026-1792574765- Updated
- 2026-11-02
OSVCLSA-2026-1793097252 No score
TuxCare security update for @modelcontextprotocol/sdk (1 CVE)
TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.29.0-tuxcare.2.
- Record
CLSA-2026-1793097252- Updated
- 2026-11-02
OSVCLSA-2026-1793100011 No score
TuxCare security update for @modelcontextprotocol/sdk (3 CVEs)
TuxCare rebuilt @modelcontextprotocol/sdk to address 3 CVEs. Fixed in 1.30.0-tuxcare.2.
- Record
CLSA-2026-1793100011- Updated
- 2026-11-02
OSVCLSA-2026-1793102531 No score
TuxCare security update for @modelcontextprotocol/sdk (1 CVE)
TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.26.0-tuxcare.3.
- Record
CLSA-2026-1793102531- Updated
- 2026-11-02
OSVCLSA-2026-1793112043 No score
TuxCare security update for @modelcontextprotocol/sdk (4 CVEs)
TuxCare rebuilt @modelcontextprotocol/sdk to address 4 CVEs. Fixed in 1.25.2-tuxcare.4.
- Record
CLSA-2026-1793112043- Updated
- 2026-11-02
OSVCLSA-2026-1793113170 No score
TuxCare security update for @modelcontextprotocol/sdk (4 CVEs)
TuxCare rebuilt @modelcontextprotocol/sdk to address 4 CVEs. Fixed in 1.24.0-tuxcare.4.
- Record
CLSA-2026-1793113170- Updated
- 2026-11-02
OSVROOT-APP-NPM-CVE-2026-111767 No score
CVE-2026-111767 in @modelcontextprotocol/sdk - Patched by Root
Root has patched CVE-2026-111767 in the @modelcontextprotocol/sdk package for Root:npm. Multiple fixed versions available.
- Record
ROOT-APP-NPM-CVE-2026-111767- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
@modelcontextprotocol/sdknpm |
1.24.0 up to 1.32.0 | 1.32.0 |
@modelcontextprotocol/sdkTuxCare:npm From an advisory covering 2 CVEs |
1.30.1-tuxcare.0 up to 1.30.1-tuxcare.2, plus listed versions 1.30.11.30.1-tuxcare.1 |
1.30.1-tuxcare.2 |
@modelcontextprotocol/sdkTuxCare:npm |
1.29.0-tuxcare.0 up to 1.29.0-tuxcare.2, plus listed versions 1.29.01.29.0-tuxcare.1 |
1.29.0-tuxcare.2 |
@modelcontextprotocol/sdkTuxCare:npm From an advisory covering 3 CVEs |
1.30.0-tuxcare.0 up to 1.30.0-tuxcare.2, plus listed versions 1.30.01.30.0-tuxcare.1 |
1.30.0-tuxcare.2 |
@modelcontextprotocol/sdkTuxCare:npm |
1.26.0-tuxcare.0 up to 1.26.0-tuxcare.3, plus listed versions 1.26.01.26.0-tuxcare.11.26.0-tuxcare.2 |
1.26.0-tuxcare.3 |
@modelcontextprotocol/sdkTuxCare:npm From an advisory covering 4 CVEs |
1.25.2-tuxcare.0 up to 1.25.2-tuxcare.4, plus listed versions 1.25.21.25.2-tuxcare.11.25.2-tuxcare.21.25.2-tuxcare.3 |
1.25.2-tuxcare.4 |
@modelcontextprotocol/sdkTuxCare:npm From an advisory covering 4 CVEs |
1.24.0-tuxcare.0 up to 1.24.0-tuxcare.4, plus listed versions 1.24.01.24.0-tuxcare.11.24.0-tuxcare.21.24.0-tuxcare.3 |
1.24.0-tuxcare.4 |
@modelcontextprotocol/sdkRoot:npm |
before 1.30.0-aikido.2 | 1.30.0-aikido.21.26.0-aikido.21.31.0-aikido.11.29.0-aikido.21.26.0-aikido.31.26.0-aikido.4 |
@rootio/modelcontextprotocol__sdkRoot:npm |
before 1.30.0-root.io.2 | 1.30.0-root.io.21.26.0-root.io.21.31.0-root.io.11.29.0-root.io.21.26.0-root.io.31.26.0-root.io.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-111767 is a high vulnerability (CVSS 8.6) in Modelcontextprotocol Typescript-sdk, published October 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in @modelcontextprotocol/sdk 1.32.0.
References
github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-22jm-h49p-29qw
nvd.nist.gov/vuln/detail/CVE-2026-111767