# MCP-related CVE reference

A curated index of over 570 publicly disclosed CVEs affecting the Model Context Protocol ecosystem, mapped to the OWASP MCP Top 10 risk categories for MCP servers, SDKs, gateways and clients.

This repository curates publicly disclosed Common Vulnerabilities and Exposures affecting the Model Context Protocol ecosystem: official and third-party MCP servers, SDKs, gateways, clients and integrations where MCP is part of the attack surface or fix scope. Each indexed CVE has a note summarizing the affected component, its weakness class, and pointers useful to defenders and maintainers, with 570 CVEs indexed at the time of the material read, newest first by disclosure date.

Every indexed CVE is mapped to its primary category in the OWASP MCP Top 10 (2025), using NVD and CWE data alongside the index's own summaries; a CVE can relate to more than one risk category, but only the primary mapping is shown in the breakdown tables. The ten categories cover issues such as token mismanagement and secret exposure, privilege escalation via scope creep, tool poisoning, software supply-chain attacks, command injection, insufficient authentication, prompt injection through contextual payloads, and shadow MCP servers.

It is maintained and curated by Vandana Verma Sehgal.

Website: https://github.com/mcp-security-project/mcp-cve-project