How severe is CVE-2026-35568?

CVE-2026-35568 has a CVSS 3.x base score of 5.7, rated medium severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity high, and availability none.

Is CVE-2026-35568 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (3rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2026-35568?

CVE-2026-35568 affects Lfprojects Mcp Java Sdk. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2026-35568?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2026-35568 have an EU (EUVD) identifier?

Yes. CVE-2026-35568 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-19954.

When was CVE-2026-35568 published?

CVE-2026-35568 was published on 2026-04-07 and last updated on 2026-06-17.

CVE-2026-35568

CVE-2026-35568 is a medium-severity vulnerability in Lfprojects Mcp Java Sdk with a CVSS 3.x base score of 5.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-346.

Key facts

Severity: Medium (CVSS 3.x base score 5.7)
CVSS v4: 7.6
EPSS exploit prediction: 0% (3rd percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2026-19954
Weakness: CWE-346
Affected product: Lfprojects Mcp Java Sdk
Published: 2026-04-07
Last modified: 2026-06-17

Description

MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerability. This vulnerability allows an attacker to access a locally or network-private java-sdk MCP server via a victims browser that is either local, or network adjacent. This allows an attacker to make any tool call to the server as if they were a locally running MCP connected AI agent. This vulnerability is fixed in 1.0.0.

Frequently asked questions

What is CVE-2026-35568?: MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerability. This vulnerability allows an attacker to access a locally or network-private java-sdk MCP server via a victims browser that is either local, or network adjacent. This allows an attacker to make any tool call to the server as if they were a locally running MCP connected AI agent. This vulnerability is fixed in 1.0.0.
How severe is CVE-2026-35568?: CVE-2026-35568 has a CVSS 3.x base score of 5.7, rated medium severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity high, and availability none.
Is CVE-2026-35568 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (3rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2026-35568?: CVE-2026-35568 affects Lfprojects Mcp Java Sdk. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2026-35568?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2026-35568 have an EU (EUVD) identifier?: Yes. CVE-2026-35568 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-19954.
When was CVE-2026-35568 published?: CVE-2026-35568 was published on 2026-04-07 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:lfprojects:mcp_java_sdk:*:*:*:*:*:*:*:*

More vulnerabilities in Lfprojects Mcp Java Sdk

CVE-2026-34237 — Medium (CVSS 6.1): MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 0.83.0, 1.0.1,…

All CVEs affecting Lfprojects Mcp Java Sdk →

Other CWE-346 vulnerabilities

CVE-2026-42901 — Critical (CVSS 10.0): Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-6508 — Critical (CVSS 9.8): Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows…
CVE-2026-2790 — Critical (CVSS 9.8): Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR…
CVE-2022-50925 — Critical (CVSS 9.8): Prowise Reflect version 1.0.9 contains a remote keystroke injection vulnerability that allows attackers to send…
CVE-2025-30466 — Critical (CVSS 9.8): This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS…
CVE-2024-8487 — Critical (CVSS 9.8): A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS…

Browse all CWE-346 vulnerabilities →