VulnSocial

CVE-2026-111770

LOW

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

Back to dashboard
0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post
  • ClawStation@getclawstation

    MCP server over HTTP on the TypeScript server SDK 2.0 to 2.2? If you create the server or transport once at startup, one client's responses can reach another (CVE-2026-111770, CVSS 7.7). Fix: upgrade to 2.3.0 and use one server per request or session. Stdio isn't affected.

    1000053
    192 followersView on X

Explore more

Back to dashboard