Malicious MCP Servers Can Redirect OAuth Credentials in Affected Python SDK Clients

Malicious MCP Servers Can Redirect OAuth Credentials in Affected Python SDK Clients Cycode disclosed an OAuth trust-boundary flaw in the official MCP Python SDK on September 28, 2026. An attacker-cont