CVE-2026-44463: Missing Dynamic Mcp Oauth Auth
The HTTP context server is initialized using only static headers without dynamic OAuth token provisioning. This can bypass secure remote server authentication. Migrate to an implementation that provisions dynamic tokens (e.g., via a token provider).
Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0rust
greprules fetch cve-2026-44463-missing-dynamic-mcp-oauth-auth --engine opengrepDescription
The HTTP context server is initialized using only static headers without dynamic OAuth token provisioning. This can bypass secure remote server authentication. Migrate to an implementation that provisions dynamic tokens (e.g., via a token provider).
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.