Security News Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials TheHackerNews Daniel Bender 29 Sep 2026 Share MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.
