CVE-2026-111767

About vulnerability

Summary

In affected versions, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other’s tasks.

Experimental tasks are deprecated. The 2026-07-28 specification replaced them with a redesigned extension. The best course of action is to stop using them.

Am I affected?

Only if your HTTP server passes taskStore to McpServer or Server. If grep -ri taskstore --exclude-dir=node_modules . finds nothing, you are not affected.

Affected versions: @modelcontextprotocol/sdk 1.24.0 through 1.31.0. The 2.x packages are not affected.

Fix

Upgrade to @modelcontextprotocol/sdk 1.32.0 or later. Each task is now tied to the session that created it, so a client that starts a new session can no longer reach its earlier tasks.

If you cannot upgrade yet, remove taskStore, or create one InMemoryTaskStore per session.

Affected product:

AngularJS , CopilotKit/CopilotKit , React , TanStack/ai , adk-js , adobe-design-data-agent-mcp , adobe-design-data-mcp , adobe-spectrum-design-data-mcp , ag-ui , agents , ai-sdk-harness-cline , ai-sdk-harness-pi , ai-sdk-provider-claude-code , allure-codeceptjs , angular-create , angular-eslint , angular-eslint-builder , angular-eslint-schematics , browserbasehq-stagehand , claude-agent-sdk-typescript , cline , cline-sdk , cloudflare-ai-chat , cloudflare-codemode , cloudflare-think , cloudflare-voice , cloudflare-voice-twilio , cloudflare/agents , codeceptjs , configure , copilotkit-agentcore-runner , copilotkit-mcp-apps-renderer , copilotkit-react-native , copilotkit-react-textarea , copilotkit-react-ui , copilotkit-runtime , copilotkit-sqlite-runner , copilotkit-voice , earendil-works-pi-ai , eslint-mcp , executor , executor-js-plugin-mcp , ext-apps , files-sdk , google-adk , google-cloud-vertexai , harness-sdk , js-genai , json-render-mcp , lynx-js-docs-mcp-server , mastra-mcp , microsoft-365-agents-toolkit , modelcontextprotocol-ext-apps , octanejs-mcp-server , openai-agents , openai-agents-extensions , openai-agents-js , openai-agents-openai , openai-agents-realtime , pandacss-mcp , pi , pi-mcp-adapter , remotion-mcp , sdk-typescript , shadcn , tanstack-ai-acp , tanstack-ai-claude-code , tanstack-ai-codex , tanstack-ai-grok-build , tanstack-ai-mcp , tanstack-ai-opencode , tanstack-ai-sandbox , tanstack-ai-sandbox-cloudflare , tanstack-ai-sandbox-local-process , temporalio-google-adk-agents , transloadit-mcp-server , tsrx-mcp , typescript-sdk , x402-mcp

Affected packages:

@modelcontextprotocol/sdk @ 1.29.0 (+355 more)