CVE-2026-33946: Mcp Session Stream Overwrite

Overwriting an existing session stream without checking if one already exists can lead to session hijacking.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Rubyβ
greprules fetch cve-2026-33946-mcp-session-stream-overwrite --engine opengrep

Description

Overwriting an existing session stream without checking if one already exists can lead to session hijacking.