CVE-2026-63127

RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's OAuth implementation in crates/rmcp/src/transport/auth.rs omits the RFC 9728 resource field from ResourceServerMetadata and allows discover_oauth_server_via_resource_metadata to use protected-resource metadata without confirming that the returned resource identifier exactly matches the configured MCP server. A malicious MCP server can publish metadata for a different legitimate MCP resource and its authorization server, causing a victim who connects and completes the authorization flow to obtain a legitimate access token that the client subsequently sends to the malicious server. The attacker can capture the token and impersonate the victim against the legitimate MCP resource within the token's granted scopes. This issue is fixed in version 2.0.0.

• CWE-345

• https://github.com/modelcontextprotocol/rust-sdk/commit/c1a8b29ff2cc45e7820b900dae42cbb4958089ec
• https://github.com/modelcontextprotocol/rust-sdk/pull/937
• https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0
• https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-33f5-2c5q-wgwj
• https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-33f5-2c5q-wgwj

Published

Sep 16, 2026

Last Modified

Sep 16, 2026

Status

Received

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-63118MCP Ruby SDK is the official Ruby SDK for Model Context Prot…6.9
• CVE-2026-63119MCP Ruby SDK is the official Ruby SDK for Model Context Prot…6.2
• CVE-2026-6312Insufficient policy enforcement in Passwords in Google Chrom…3.1
• CVE-2026-63123Tina is a headless content management system. Prior to 2.5.2…6.5
• CVE-2026-63125Incus is a system container and virtual machine manager. Pri…9.9
• CVE-2026-63126Wire provides gRPC and protocol buffers for Android, Kotlin,…7.5
• CVE-2026-63128RMCP is an official Rust SDK for the Model Context Protocol.…7.5
• CVE-2026-6313Insufficient policy enforcement in CORS in Google Chrome pri…3.1
• CVE-2026-63131OpenBao is an open source identity-based secrets management …6
• CVE-2026-63132OpenBao is an open source identity-based secrets management …9.2
• CVE-2026-63133Malcolm is a network traffic analysis tool suite. Prior to v…6.5
• CVE-2026-63134Malcolm is a network traffic analysis tool suite. Prior to v…5.4