HackerNoon

The MCP Server Chose the Token Endpoint. Two Official SDKs Trusted It.

I found OAuth credential exposure flaws in the official MCP Python and TypeScript SDKs. Why patching CVE-2026-115563 and CVE-2026-104850 may not be enough.