{"metadata": {"vulnerability": "CVE-2026-63127", "count": 48, "kinds": {"milestone": 7, "sighting": 2, "kev": 0, "other": 39}}, "data": [{"timestamp": "2026-07-15T16:54:55.816Z", "date_only": false, "value": "2026-07-15T16:54:55.816Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-63127", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-10T15:33:37.691Z", "date_only": false, "value": "2026-08-10T15:33:37.691000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-08-10T15:33:37.691Z", "date_only": false, "value": "2026-08-10T15:33:37.691000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-08-10T15:50:59.860Z", "date_only": false, "value": "2026-08-10T15:50:59.860533+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-08-10T15:50:59.860Z", "date_only": false, "value": "2026-08-10T15:50:59.860533+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-09-16T14:49:04.401Z", "date_only": false, "value": "2026-09-16T14:49:04.401000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-09-16T14:49:04.401Z", "date_only": false, "value": "2026-09-16T14:49:04.401000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-09-16T14:50:54.296Z", "date_only": false, "value": "2026-09-16T14:50:54.296Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-63127", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-16T14:50:54.296Z", "date_only": false, "value": "2026-09-16T14:50:54.296000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-09-16T14:50:54.296Z", "date_only": false, "value": "2026-09-16T14:50:54.296000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-09-16T14:50:54.296Z", "date_only": false, "value": "2026-09-16T14:50:54.296Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-63127", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T14:51:23.439Z", "date_only": false, "value": "2026-09-16T14:51:23.439496+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-09-16T14:51:23.439Z", "date_only": false, "value": "2026-09-16T14:51:23.439496+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-09-16T15:01:10.989Z", "date_only": false, "value": "2026-09-16T15:01:10.989628+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-09-16T15:01:10.989Z", "date_only": false, "value": "2026-09-16T15:01:10.989628+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-09-16T15:17:39Z", "date_only": false, "value": "2026-09-16T15:17:39Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-33F5-2C5Q-WGWJ", "record": "GHSA-33F5-2C5Q-WGWJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-16T15:17:39.817Z", "date_only": false, "value": "2026-09-16T15:17:39.817", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63127", "record": "FKIE_CVE-2026-63127", "field": "published"}, {"timestamp": "2026-09-16T15:38:50.771Z", "date_only": false, "value": "2026-09-16T15:38:50.771703Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63127", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-16T15:38:50.771Z", "date_only": false, "value": "2026-09-16T15:38:50.771703Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63127", "record": "FKIE_CVE-2026-63127", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-16T15:39:26.956Z", "date_only": false, "value": "2026-09-16T15:39:26.956Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-63127", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-16T15:39:26.956Z", "date_only": false, "value": "2026-09-16T15:39:26.956Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63127", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T22:13:26Z", "date_only": false, "value": "2026-09-16T22:13:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-33F5-2C5Q-WGWJ", "record": "GHSA-33F5-2C5Q-WGWJ", "field": "published"}, {"timestamp": "2026-09-16T22:13:26Z", "date_only": false, "value": "2026-09-16T22:13:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-33F5-2C5Q-WGWJ", "record": "GHSA-33F5-2C5Q-WGWJ", "field": "modified"}, {"timestamp": "2026-09-17T00:35:09.126Z", "date_only": false, "value": "2026-09-17T00:35:09.126898Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-33f5-2c5q-wgwj", "record": "CVE-2026-63127", "field": "creation_timestamp", "uuid": "dd1cb391-ccce-4ec6-845c-427864bfe858", "url": "https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-33f5-2c5q-wgwj"}, {"timestamp": "2026-09-17T03:31:23.748Z", "date_only": false, "value": "2026-09-17T03:31:23.748728Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/16597bd55d59e6c89394c487c227381c", "record": "CVE-2026-63127", "field": "creation_timestamp", "uuid": "d1d2c85a-cb7b-4d13-9941-43c8a2098339", "content": "# CVE-2026-63127: CVE-2026-63127: OAuth Resource Spoofing and Token Leakage in rmcp SDK\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2026-63127\n\n## Summary\nAn OAuth resource spoofing vulnerability in the rmcp crate prior to 2.0.0 allows a malicious Model Context Protocol (MCP) server to spoof protected resource metadata. By presenting metadata pointing to a legitimate resource and authorization server, the attacker can trick the client into completing the authentication flow and subsequently sending the authorized token back to the malicious server.\n\n## TL;DR\nA missing validation of the RFC 9728 'resource' field in the rmcp crate allows rogue MCP servers to perform OAuth resource spoofing and capture legitimate access tokens.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-345\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.2 (High)\n- **EPSS Score**: N/A\n- **Impact**: Confidentiality High (C:H), Integrity Low (I:L), Scope Changed (S:C)\n- **Exploit Status**: Proof-of-Concept (PoC) available in official test suite\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Model Context Protocol (MCP) clients using the rmcp crate with OAuth features enabled\n- **rmcp**: < 2.0.0 (Fixed in: `2.0.0`)\n\n## Mitigation\n\n- Upgrade the rmcp crate to version 2.0.0 or higher.\n- Disable dynamic OAuth metadata discovery if interacting with untrusted or unverified third-party MCP servers.\n- Enforce egress network controls to restrict outbound metadata discovery requests to trusted hosts only.\n\n**Remediation Steps:**\n1. Open the Cargo.toml of your Rust project containing the rmcp dependency.\n2. Update the dependency entry to: rmcp = { version = \">= 2.0.0\", features = [\"auth\"] }.\n3. Run `cargo update -p rmcp` to update the Cargo.lock file to the patched version.\n4. Verify the updated configuration by rebuilding your client and executing automated verification tests.\n\n## References\n\n- [GHSA-33f5-2c5q-wgwj: OAuth Resource Spoofing Vulnerability in rmcp Crate](https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-33f5-2c5q-wgwj)\n- [Pull Request #937](https://github.com/modelcontextprotocol/rust-sdk/pull/937)\n- [Fix Commit](https://github.com/modelcontextprotocol/rust-sdk/commit/c1a8b29ff2cc45e7820b900dae42cbb4958089ec)\n- [Release rmcp-v2.0.0](https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0)\n- [CVE-2026-63127 NVD Record](https://www.cve.org/CVERecord?id=CVE-2026-63127)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-63127) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/16597bd55d59e6c89394c487c227381c"}, {"timestamp": "2026-09-18T13:20:10.258Z", "date_only": false, "value": "2026-09-18T13:20:10.258000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-09-18T13:20:10.258Z", "date_only": false, "value": "2026-09-18T13:20:10.258000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": false, "value": "2026-09-22T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11849-1", "record": "OPENSUSE-SU-2026:11849-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": false, "value": "2026-09-22T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11849-1", "record": "OPENSUSE-SU-2026:11849-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": false, "value": "2026-09-22T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11849-1", "record": "OPENSUSE-SU-2026:11849-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": false, "value": "2026-09-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11849-1", "record": "OPENSUSE-SU-2026:11849-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-22T18:32:06.471Z", "date_only": false, "value": "2026-09-22T18:32:06.471964+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-09-22T18:32:06.471Z", "date_only": false, "value": "2026-09-22T18:32:06.471964+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-09-23T08:33:17Z", "date_only": false, "value": "2026-09-23T08:33:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11849-1", "record": "OPENSUSE-SU-2026:11849-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-23T08:33:17Z", "date_only": false, "value": "2026-09-23T08:33:17Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11849-1", "record": "OPENSUSE-SU-2026:11849-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-30T17:51:56.193Z", "date_only": false, "value": "2026-09-30T17:51:56.193", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63127", "record": "FKIE_CVE-2026-63127", "field": "lastModified"}, {"timestamp": "2026-10-12T13:06:45Z", "date_only": false, "value": "2026-10-12T13:06:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-12T13:06:45Z", "date_only": false, "value": "2026-10-12T13:06:45+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-12T13:06:45Z", "date_only": false, "value": "2026-10-12T13:06:45+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-12T13:06:56Z", "date_only": false, "value": "2026-10-12T13:06:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-12T13:06:56Z", "date_only": false, "value": "2026-10-12T13:06:56+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-12T13:06:56Z", "date_only": false, "value": "2026-10-12T13:06:56+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-16T18:53:11Z", "date_only": false, "value": "2026-10-16T18:53:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-16T18:53:11Z", "date_only": false, "value": "2026-10-16T18:53:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-16T18:53:11Z", "date_only": false, "value": "2026-10-16T18:53:11+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-16T18:53:11Z", "date_only": false, "value": "2026-10-16T18:53:11+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-16T18:53:11Z", "date_only": false, "value": "2026-10-16T18:53:11+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:80764", "record": "RHSA-2026:80764", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T18:53:11Z", "date_only": false, "value": "2026-10-16T18:53:11+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:80765", "record": "RHSA-2026:80765", "field": "document.tracking.current_release_date"}]}