The Hacker News

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.
Arabian Post

MCP Python SDK patches high-risk OAuth credential flaw

Maintainers of the Model Context Protocol Python SDK have patched a high-severity OAuth weakness that could let a malicious MCP server steal authentication ...

What to do if Claude's MCP shows 'Connection closed' — How to revert using --with "mcp<2" if the cause is mcp 2.0 (uvx/uv tool measurements)

This article is for those whose MCP servers configured in Claude Desktop or Claude Code stopped connecting one day after the end of July 2026. It targets Python-based servers launched with "command": ...