5 min read
Vulnerabilities GHSA-qx49-fqc8-xw99 (CVSS 7.5, no CVE) lets a malicious MCP server steer the official Python SDK's OAuth client to a token endpoint it controls. Fixed in 1.30.0 and 2.2.0, but some providers need a manual issuer setting.