09:09
2026-09-29
swapupdate.in
ai-agents
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
The official MCP Python SDK contained a high-severity OAuth credential-theft flaw that let a malicious MCP server redirect a client's client secret, authorization code, and PKCE proof key to an attack…