CVE-2026-108395
HIGH 7.5The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mcp artifact, from 0.13.0 through 0.18.3 and 1.0.0 through 1.1.3 in io.modelcontextprotocol.sdk:mcp-core, and from mcp-core 2.0.0-M1 through 2.0.0, the Servlet-based SSE, Streamable HTTP, and Stateless server transports read an HTTP request body into memory without enforcing a maximum size. An unauthenticated remote client able to reach an affected transport can stream an arbitrarily large POST body, including with chunked transfer encoding, until the Java process exhausts its heap and becomes unavailable. Authentication, Origin or Host validation, or an upstream request-size limit can reject the request before the vulnerable read. The maintained mcp-core lines are fixed in versions 0.18.4, 1.1.4, and 2.0.1.
Severe if exploited (CVSS 7.5), but no known exploitation and low modeled probability. Patch on a normal cadence.
Exploitation likelihood
0.6%chance of exploitation in 30 days · 49th percentile
Impact if exploited
7.5CVSS 3.1 · HIGH
- ConfidentialityNone
- IntegrityNone
- AvailabilityHigh
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ✓Privileges: No account or privileges required
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Affected
Vendors Modelcontextprotocol
Products Io.Modelcontextprotocol.Sdk:Mcp Io.Modelcontextprotocol.Sdk:Mcp Core
Weakness (CWE)
- CWE-770: : Allocation of Resources Without Limits or Throttling
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References and research data (JSON)
All CVSS metrics
- HIGH 7.5 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - HIGH 7.5 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Advisories
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101503 EUVD · EUVD-2026-101503
Technical & other
- https://github.com/modelcontextprotocol/java-sdk/security/advisories/GHSA-4x8c-5vv7-973f CVE record · GitHub_M · Updated 2026-10-14T17:46:23.760Z
NVD · CVE-2026-108395 · Updated 2026-10-16T16:00:33.533 - https://github.com/modelcontextprotocol/java-sdk/commit/1499df22c7023aa257223143a5dcf5b1db7ef80d CVE record · GitHub_M · Updated 2026-10-14T17:46:23.760Z
NVD · CVE-2026-108395 · Updated 2026-10-16T16:00:33.533 - https://github.com/modelcontextprotocol/java-sdk/commit/6a41dedaa0625551582d8247e5a4d78eae1131b2 CVE record · GitHub_M · Updated 2026-10-14T17:46:23.760Z
NVD · CVE-2026-108395 · Updated 2026-10-16T16:00:33.533 - https://github.com/modelcontextprotocol/java-sdk/commit/8c0fdd1b1f76adba3ce7945d29f73fa2ddc66598 CVE record · GitHub_M · Updated 2026-10-14T17:46:23.760Z
NVD · CVE-2026-108395 · Updated 2026-10-16T16:00:33.533 - https://github.com/modelcontextprotocol/java-sdk/commit/9e4d5fa827b6ba69457f5fd93573184789528efa CVE record · GitHub_M · Updated 2026-10-14T17:46:23.760Z
NVD · CVE-2026-108395 · Updated 2026-10-16T16:00:33.533 - https://github.com/modelcontextprotocol/java-sdk/releases/tag/v0.18.4 CVE record · GitHub_M · Updated 2026-10-14T17:46:23.760Z
NVD · CVE-2026-108395 · Updated 2026-10-16T16:00:33.533 - https://github.com/modelcontextprotocol/java-sdk/releases/tag/v1.1.4 CVE record · GitHub_M · Updated 2026-10-14T17:46:23.760Z
NVD · CVE-2026-108395 · Updated 2026-10-16T16:00:33.533 - https://github.com/modelcontextprotocol/java-sdk/releases/tag/v2.0.1 CVE record · GitHub_M · Updated 2026-10-14T17:46:23.760Z
NVD · CVE-2026-108395 · Updated 2026-10-16T16:00:33.533