AI developer toolsBriefConfirmed by two or more outlets
MCP 2026
mcp-atlassian CVE-2026-27825 / -27826: SSRF plus arbitrary write leads to RCE.
- Disclosed
What happened
- Official MCP Python SDK OAuth redirect, which let a malicious server steal credentials. Fixed in 1.30.0 and 2.2.0 (Sep 2026).
- OpenCode: a malicious MCP server gets code execution during OAuth sign-in on Windows/WSL. Fixed silently in 1.18.33 on 28 Sep, with no CVE (THN, 22 Oct 2026).
Live scores
Live scores
CVE-2026-27825- EPSS
- 0.115
likely to be attacked soon - VEDAS
- 0.730
some exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-27826- EPSS
- 0.130
likely to be attacked soon - VEDAS
- 0.982
strong exploit evidence - On CISA KEV
- Not listed
Sources
- https://thehackernews.com/2026/09/official-mcp-python-sdk-flaw-can-let.html
- https://thehackernews.com/2026/10/opencode-flaw-lets-malicious-mcp.html
- https://pluto.security/blog/mcp-servers-exploited-enterprise-risk/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.