CVE-2026-35568 MCP Java-SDK has a DNS Rebinding Vulnerability
An attacker can exploit DNS rebinding to access private MCP servers via a victim's browser, enabling unauthorized tool calls and potential code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-35568?
CVE-2026-35568 is a high-severity server-side request forgery vulnerability in modelcontextprotocol java-sdk, published on 7 Apr 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerability. This vulnerability allows an attacker to access a locally or network-private java-sdk MCP server via a victims browser that is either local, or network adjacent. This allows an attacker to make any tool call to the server as if they were a locally running MCP connected AI agent. This vulnerability is fixed in 1.0.0.
Weakness: CWE-346
Which versions are affected by CVE-2026-35568?
2 open source packages ship an affected version, including io.modelcontextprotocol.sdk:mcp-core. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
io.modelcontextprotocol.sdk:mcp-core Maven | All versions | 1.0.0 |
io.modelcontextprotocol.sdk:mcp-core Maven | All versions | 1.0.0 |
Products include Lfprojects Mcp Java Sdk.
How do I fix CVE-2026-35568?
Upgrade io.modelcontextprotocol.sdk:mcp-core to 1.0.0 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-35568 being exploited?
There is no known exploitation of CVE-2026-35568 in the wild and no public exploit code.
Other vulnerabilities in modelcontextprotocol java-sdk
Sources
Also known as GHSA-8jxr-pr72-r468, MINI-7462-v2ff-7m68, MINI-cfvw-qr57-hhj5.