CVE-2025-66414

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Prior to 1.24.0, The Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost without authentication with StreamableHTTPServerTransport or SSEServerTransport and has not enabled enableDnsRebindingProtection, a malicious website could exploit DNS rebinding to bypass same-origin policy restrictions and send requests to the local MCP server. This could allow an attacker to invoke tools or access resources exposed by the MCP server on behalf of the user in those limited circumstances. Note that running HTTP-based MCP servers locally without authentication is not recommended per MCP security best practices. This issue does not affect servers using stdio transport. This vulnerability is fixed in 1.24.0.

• CWE-1188

• https://github.com/modelcontextprotocol/typescript-sdk/commit/09623e2aa5044f9e9da62c73d820a8250b9d97edPatch
• https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-w48q-cv73-mx4wVendor Advisory

Published

Dec 2, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-66409ESF-IDF is the Espressif Internet of Things (IOT) Developmen…9.1
• CVE-2025-6641PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Infor…3.3
• CVE-2025-66410Gin-vue-admin is a backstage management system based on vue …9.1
• CVE-2025-66411Coder allows organizations to provision remote development e…5.5
• CVE-2025-66412Angular is a development platform for building mobile and de…5.4
• CVE-2025-66413Git for Windows is the Windows port of Git. Prior to 2.53.0(…6.5
• CVE-2025-66415fastify-reply-from is a Fastify plugin to forward the curren…5.4
• CVE-2025-66416The MCP Python SDK, called `mcp` on PyPI, is a Python implem…8.1
• CVE-2025-66417GLPI is a free asset and IT management software package. Fro…9.8
• CVE-2025-66418urllib3 is a user-friendly HTTP client library for Python. S…7.5
• CVE-2025-66419MaxKB is an open-source AI assistant for enterprise. In vers…10
• CVE-2025-6642PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remot…7.8