How severe is CVE-2026-35568?

CVE-2026-35568 has a CVSS 3.x base score of 5.7, rated medium severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity high, and availability none.

Is CVE-2026-35568 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (3rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2026-35568?

CVE-2026-35568 affects Lfprojects Mcp Java Sdk. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2026-35568?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2026-35568 have an EU (EUVD) identifier?

Yes. CVE-2026-35568 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-19954.

When was CVE-2026-35568 published?

CVE-2026-35568 was published on 2026-04-07 and last updated on 2026-07-24.

CVE-2026-35568

CVE-2026-35568 is a medium-severity vulnerability in Lfprojects Mcp Java Sdk with a CVSS 3.x base score of 5.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-346.

Key facts

Severity: Medium (CVSS 3.x base score 5.7)
CVSS v4: 7.6
EPSS exploit prediction: 0% (3rd percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2026-19954
Weakness: CWE-346
Affected product: Lfprojects Mcp Java Sdk
Published: 2026-04-07
Last modified: 2026-07-24

Description

MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerability. This vulnerability allows an attacker to access a locally or network-private java-sdk MCP server via a victims browser that is either local, or network adjacent. This allows an attacker to make any tool call to the server as if they were a locally running MCP connected AI agent. This vulnerability is fixed in 1.0.0.

Frequently asked questions

What is CVE-2026-35568?: MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerability. This vulnerability allows an attacker to access a locally or network-private java-sdk MCP server via a victims browser that is either local, or network adjacent. This allows an attacker to make any tool call to the server as if they were a locally running MCP connected AI agent. This vulnerability is fixed in 1.0.0.
How severe is CVE-2026-35568?: CVE-2026-35568 has a CVSS 3.x base score of 5.7, rated medium severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity high, and availability none.
Is CVE-2026-35568 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (3rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2026-35568?: CVE-2026-35568 affects Lfprojects Mcp Java Sdk. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2026-35568?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2026-35568 have an EU (EUVD) identifier?: Yes. CVE-2026-35568 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-19954.
When was CVE-2026-35568 published?: CVE-2026-35568 was published on 2026-04-07 and last updated on 2026-07-24.

References

Affected products (1)

cpe:2.3:a:lfprojects:mcp_java_sdk:*:*:*:*:*:*:*:*

More vulnerabilities in Lfprojects Mcp Java Sdk

CVE-2026-34237 — Medium (CVSS 6.1): MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 0.83.0, 1.0.1,…

All CVEs affecting Lfprojects Mcp Java Sdk →

Other CWE-346 vulnerabilities

CVE-2026-42901 — Critical (CVSS 10.0): Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-84140 — Critical (CVSS 9.8): Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2,…
CVE-2026-84133 — Critical (CVSS 9.8): Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR…
CVE-2026-84129 — Critical (CVSS 9.8): Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2,…
CVE-2026-16375 — Critical (CVSS 9.8): Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR…
CVE-2026-16358 — Critical (CVSS 9.8): Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR…

Browse all CWE-346 vulnerabilities →