{"vulnerability": "CVE-2026-63128", "sightings": [{"uuid": "593a63e3-cc54-4c19-9d51-f96a8d9e7902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63128", "type": "published-proof-of-concept", "source": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-9pj6-vhgr-3mwh", "content": "", "creation_timestamp": "2026-09-17T00:35:06.758824Z"}, {"uuid": "f36309e8-b17f-4ada-82c1-05ffee1681ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63128", "type": "seen", "source": "https://gist.github.com/alon710/db9fb10afa43797b42605078feda688f", "content": "# CVE-2026-63128: CVE-2026-63128: Uncontrolled Resource Consumption in Model Context Protocol Rust SDK (rmcp)\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2026-63128\n\n## Summary\nCVE-2026-63128 is a high-severity uncontrolled resource consumption vulnerability in the Model Context Protocol (MCP) official Rust SDK (the rmcp crate) prior to version 2.0.0. An unauthenticated attacker can exploit this vulnerability by sending malformed or mismatching handshake requests to the stateful Streamable HTTP server, causing persistent memory allocation without cleanup. This results in an unbounded memory leak and lock contention that ultimately leads to complete denial of service.\n\n## TL;DR\nThe stateful HTTP server in the rmcp crate allocates session resources before validating request headers and bodies. If validation fails, the server exits early without reclaiming the allocated memory, leading to an unbounded memory leak and eventual server crash.\n\n## Technical Details\n\n- **CWE ID**: CWE-400 / CWE-401 / CWE-772\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 7.5 (High)\n- **Exploit Status**: None\n- **CISA KEV Listed**: No\n- **Mitigated Version**: 2.0.0\n\n## Affected Systems\n\n- Model Context Protocol Rust SDK (rmcp crate) prior to version 2.0.0\n- **rmcp**: < 2.0.0 (Fixed in: `2.0.0`)\n\n## Mitigation\n\n- Upgrade the rmcp crate to version 2.0.0 or higher.\n- Implement rate-limiting on stateful Streamable HTTP POST endpoints.\n- Deploy WAF rules to validate MCP header protocol integrity before forwarding requests to the application layer.\n\n**Remediation Steps:**\n1. Identify dependencies on the 'rmcp' crate within Cargo.toml.\n2. Update the dependency version to '2.0.0' or higher.\n3. Verify integration tests pass under stateful configurations.\n4. Deploy the updated application container or binary to production environments.\n\n## References\n\n- [Official GitHub Advisory](https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-9pj6-vhgr-3mwh)\n- [Fix PR #934](https://github.com/modelcontextprotocol/rust-sdk/pull/934)\n- [Fix Commit dfa7fd6f9309deab60bea230b041be9a3fcda846](https://github.com/modelcontextprotocol/rust-sdk/commit/dfa7fd6f9309deab60bea230b041be9a3fcda846)\n- [SDK Release v2.0.0](https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-63128) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-17T02:31:48.259144Z"}]}