AIKIDO-2026-344432
@modelcontextprotocol/sdk is vulnerable to Incorrect Authorization
68
Medium Risk
This Affects:
@modelcontextprotocol/sdkTL;DR
The SDK server accepts any verified bearer token without checking which audience it was issued for. When one authorization server issues tokens for multiple services, servers using requireBearerAuth() or verifyBearerToken() accept a token issued for another service. The fix adds an expectedResource option and makes verifyAccessToken() return the token's audience, so the server can reject tokens meant for another service.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your HTTP server uses requireBearerAuth() or verifyBearerToken() with an authorization server that also issues tokens for other services.
Background info
@modelcontextprotocol/sdk is vulnerable to Incorrect Authorization in versions 1.6.0 - 1.31.0.
How to fix this
Upgrade the @modelcontextprotocol/sdk library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.