CVE-2026-35568: Mcp Java Single Session Transport
The MCP Java SDK configured with a single-session web transport (e.g., WebFluxSseServerTransport) routes all connections into a shared context. This lack of session isolation is vulnerable to DNS rebinding attacks, enabling unauthorized websites or adjacent network attackers to execute arbitrary tools against the local AI agent as if they were the owner. Ref
Javagreprules fetch cve-2026-35568-mcp-java-single-session-transport --engine opengrepDescription
The MCP Java SDK configured with a single-session web transport (e.g., WebFluxSseServerTransport) routes all connections into a shared context. This lack of session isolation is vulnerable to DNS rebinding attacks, enabling unauthorized websites or adjacent network attackers to execute arbitrary tools against the local AI agent as if they were the owner. Ref
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.