OAuth

8 Oct 2026Security

Cycode found a vulnerability that let an MCP server steal OAuth credentials

Upgrade the SDK to version 2.2.0 or 1.30.0 to remove the vulnerability.

Cybersecurity Insiders