Uncaught Exception
CVE-2025-53365
Summary
The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). In versions 0.2.0 through 1.9.4, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught `ClosedResourceError` on the server side, causing the server to crash and requiring a restart to restore service. Impact may vary depending on the deployment conditions and presence of infrastructure-level resilience measures.
- LOW
- NETWORK
- NONE
- NONE
CWE-248 - Uncaught Exception
An exception is thrown from a function, but it is not caught.
References
Advisory Timeline
- Published
