CVE-2026-53937

MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, `ReadBuffer.append` in `kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt` writes every chunk of bytes received from the stdio transport into a `kotlinx.io.Buffer` with no size cap. Frames are extracted from that buffer only when a `\n` (0x0a) byte is observed. A peer that streams bytes without ever sending a newline causes the internal buffer to grow indefinitely until the JVM (or the surrounding host process) is OOM-killed. The leak is amplified by `StdioServerTransport` and `StdioClientTransport`, which both queue raw chunks through a `kotlinx.coroutines.channels.Channel<ByteArray>(Channel.UNLIMITED)` and then call `readBuffer.append(chunk)` without backpressure or size guard. This is a remote-pre-auth denial of service whenever an SDK stdio server's stdin is fed by an untrusted or attacker-controlled producer (for example: a host program that exec's the MCP server as a subprocess and pipes through bytes received from a network peer, or a sidecar wrapper that proxies bytes from an HTTP endpoint to the stdio transport). Version 0.13.0 fixes the issue.

• CWE-400
• CWE-770

• https://github.com/modelcontextprotocol/kotlin-sdk/blob/6d5bac1/kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt
• https://github.com/modelcontextprotocol/kotlin-sdk/commit/6e6f80512fb8fcc9f3c031cfd693ccbcf9c4aaab
• https://github.com/modelcontextprotocol/kotlin-sdk/releases/tag/0.13.0
• https://github.com/modelcontextprotocol/kotlin-sdk/security/advisories/GHSA-74gp-qhv5-v493
• https://github.com/modelcontextprotocol/kotlin-sdk/security/advisories/GHSA-74gp-qhv5-v493

Published

Sep 9, 2026

Last Modified

Sep 14, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5393Dual-Algorithm CertificateVerify out-of-bounds read. When pr…9.1
• CVE-2026-53930NocoDB is software for building databases as spreadsheets. P…5.1
• CVE-2026-53931NocoDB is software for building databases as spreadsheets. P…6.9
• CVE-2026-53932laravel-backup-restore restores database backups made with s…8
• CVE-2026-53933Maravel, a PHP framework oriented towards dependency injecti…6.9
• CVE-2026-53935Cilium is a networking, observability, and security solution…6.9
• CVE-2026-53938OpenIDC/cjose is a C library implementing the Javascript Obj…8.2
• CVE-2026-53939OpenIDC/cjose is a C library implementing the Javascript Obj…9.1
• CVE-2026-5394An authenticated administrative user who can import or save …7
• CVE-2026-53940Conda is a system-level binary package and environment manag…8.8
• CVE-2026-53941Inspektor Gadget is a set of tools and framework for data co…6.9
• CVE-2026-53943Ghost is a Node.js content management system. From until 6.…9.6