{"id":7200,"date":"2026-11-11T14:20:13","date_gmt":"2026-11-11T14:20:13","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability"},"modified":"2026-11-11T14:20:13","modified_gmt":"2026-11-11T14:20:13","slug":"cve-2026-123272-mcp-go-oauth-token-theft-vulnerability","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability","title":{"rendered":"CVE-2026-123272: Token Theft Vulnerability in mcp-go OAuth Client Allows Malicious Servers to Obtain Credentials for Other Resources"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Vulnerability Overview<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A high-severity security vulnerability tracked as **CVE-2026-123272** has been disclosed in the Mark3labs mcp-go OAuth client library. The flaw, which affects versions v0.48.0 through v1.2.0, allows malicious Model Context Protocol (MCP) servers to obtain OAuth access tokens intended for other resources by exploiting improper validation in the `OAuthHandler.fetchServerMetadata` function.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability carries a CVSS score of 8.0 and was reported privately by security researcher Theodoros Lampropoulos (@GimmyDatBeeR).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Technical Details<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability stems from insufficient validation when the OAuth client fetches Protected Resource Metadata (RFC 9728) from the well-known path of an MCP server. According to the GitHub security advisory, the client failed to apply RFC 9728 section 3.3 validation checks to metadata retrieved from the well-known path, though these checks were correctly applied to metadata advertised through WWW-Authenticate headers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When connecting to an MCP server, the OAuth client would:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Fetch Protected Resource Metadata from the server&#8217;s well-known path<\/li><li>Accept the declared resource identifier without validation<\/li><li>Use this unvalidated resource as the RFC 8707 resource parameter in:<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">  &#8211; Dynamic client registration<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">  &#8211; Authorization requests<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">  &#8211; Token exchange operations<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">  &#8211; Token refresh operations<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Attack Scenario<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A malicious or compromised MCP server could exploit this flaw by declaring a different MCP server as its resource identifier in the metadata. The OAuth client would then request an access token for that victim server from the authorization server. The attacker&#8217;s server would receive this token and could replay it against the victim resource, effectively stealing credentials intended for another service.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As stated in the commit message: &#8220;A resource that does not bind to the addressed MCP server is rejected instead of being used as the RFC 8707 resource indicator.&#8221;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Affected Versions<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>**Vulnerable**: mcp-go versions v0.48.0 through v1.2.0<\/li><li>**Patched**: mcp-go version v1.2.1 and later<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Patch Details<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The fix was implemented in commit 90d247e and released in version v1.2.1 on October 9, 2026. The patch introduces validation of the declared resource against the addressed resource when fetching metadata from the well-known path.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">According to the pull request #1053, the fix implements a binding check that requires:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Same scheme and host (case-insensitive comparison)<\/li><li>Matching query, fragment, and userinfo components<\/li><li>Path equal to or a segment-aware prefix of the addressed path<\/li><li>Trailing slashes are ignored<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The validation is intentionally designed to be slightly looser for well-known paths than for advertised paths, allowing servers mounted at paths like `\/mcp` that declare their origin as the resource to continue functioning. However, any resource naming a different server is now rejected with the error message: &#8220;protected resource metadata from %q declares resource %q which does not match base URL %q&#8221;.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When a mismatch is detected, the metadata is not used, preventing the OAuth client from making registration or token requests with the malicious resource identifier.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Mitigation Recommendations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Organizations using mcp-go should take the following actions:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. **Upgrade immediately** to mcp-go version v1.2.1 or later<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. Review logs for any suspicious OAuth token requests that may indicate exploitation attempts<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. Audit MCP server connections to ensure only trusted servers are configured<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4. Consider rotating OAuth credentials if exploitation is suspected<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Additional Context<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability affects the OAuth client transport component of mcp-go, specifically the code in `client\/transport\/oauth.go`. The fix includes comprehensive test coverage in `oauth_prm_resource_binding_test.go` to verify that mismatched resources are properly rejected and that legitimate OAuth flows continue to function correctly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No evidence of active exploitation has been reported in the public sources at the time of disclosure.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-123272\" target=\"_blank\" rel=\"noreferrer noopener\">NVD &#8211; CVE-2026-123272<\/a><\/li><li><a href=\"https:\/\/github.com\/mark3labs\/mcp-go\/security\/advisories\/GHSA-xf6j-693p-wqxx\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Security Advisory GHSA-xf6j-693p-wqxx<\/a><\/li><li><a href=\"https:\/\/github.com\/mark3labs\/mcp-go\/commit\/90d247ed8d45cbb7d71d9a95e112789b78760443\" target=\"_blank\" rel=\"noreferrer noopener\">Fix commit 90d247e<\/a><\/li><li><a href=\"https:\/\/github.com\/mark3labs\/mcp-go\/pull\/1053\" target=\"_blank\" rel=\"noreferrer noopener\">Pull Request #1053<\/a><\/li><li><a href=\"https:\/\/github.com\/mark3labs\/mcp-go\/releases\/tag\/v1.2.1\" target=\"_blank\" rel=\"noreferrer noopener\">Release v1.2.1<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>A high-severity vulnerability in Mark3labs mcp-go OAuth client before version 1.2.1 allows malicious MCP servers to declare arbitrary resources in metadata and obtain access tokens intended for other servers.<\/p>\n","protected":false},"author":2,"featured_media":7199,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"high","_nx_sec_affected":"Mark3labs mcp-go versions v0.48.0 through v1.2.0","_nx_sec_status":"patch-available","_nx_sec_kicker":"URGENT: OAuth Token Theft Flaw in mcp-go Client Library"},"categories":[65,22,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-7200","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-security","category-coding","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-123272: mcp-go OAuth Token Theft Vulnerability<\/title>\n<meta name=\"description\" content=\"CVE-2026-123272 affects mcp-go before v1.2.1, allowing malicious MCP servers to obtain OAuth tokens for other resources through improper validation.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-123272: mcp-go OAuth Token Theft Vulnerability\" \/>\n<meta property=\"og:description\" content=\"CVE-2026-123272 affects mcp-go before v1.2.1, allowing malicious MCP servers to obtain OAuth tokens for other resources through improper validation.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-11T14:20:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"CVE-2026-123272: Token Theft Vulnerability in mcp-go OAuth Client Allows Malicious Servers to Obtain Credentials for Other Resources\",\"datePublished\":\"2026-11-11T14:20:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability\"},\"wordCount\":606,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability-title.webp\",\"articleSection\":[\"AI Security\",\"Coding\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-11T14:20:13+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability\",\"name\":\"CVE-2026-123272: mcp-go OAuth Token Theft Vulnerability\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability-title.webp\",\"datePublished\":\"2026-11-11T14:20:13+00:00\",\"description\":\"CVE-2026-123272 affects mcp-go before v1.2.1, allowing malicious MCP servers to obtain OAuth tokens for other resources through improper validation.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Security researcher examining OAuth authentication flow diagrams on a computer screen in a dimly lit office\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2026-123272: Token Theft Vulnerability in mcp-go OAuth Client Allows Malicious Servers to Obtain Credentials for Other Resources\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-123272: mcp-go OAuth Token Theft Vulnerability","description":"CVE-2026-123272 affects mcp-go before v1.2.1, allowing malicious MCP servers to obtain OAuth tokens for other resources through improper validation.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability","og_locale":"en_US","og_type":"article","og_title":"CVE-2026-123272: mcp-go OAuth Token Theft Vulnerability","og_description":"CVE-2026-123272 affects mcp-go before v1.2.1, allowing malicious MCP servers to obtain OAuth tokens for other resources through improper validation.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability","og_site_name":"i10X News","article_published_time":"2026-11-11T14:20:13+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"CVE-2026-123272: Token Theft Vulnerability in mcp-go OAuth Client Allows Malicious Servers to Obtain Credentials for Other Resources","datePublished":"2026-11-11T14:20:13+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability"},"wordCount":606,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability-title.webp","articleSection":["AI Security","Coding","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-11T14:20:13+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability","url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability","name":"CVE-2026-123272: mcp-go OAuth Token Theft Vulnerability","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability-title.webp","datePublished":"2026-11-11T14:20:13+00:00","description":"CVE-2026-123272 affects mcp-go before v1.2.1, allowing malicious MCP servers to obtain OAuth tokens for other resources through improper validation.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability-title.webp","width":1344,"height":768,"caption":"Security researcher examining OAuth authentication flow diagrams on a computer screen in a dimly lit office"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123272-mcp-go-oauth-token-theft-vulnerability#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"CVE-2026-123272: Token Theft Vulnerability in mcp-go OAuth Client Allows Malicious Servers to Obtain Credentials for Other Resources"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7200","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=7200"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7200\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/7199"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=7200"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=7200"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=7200"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=7200"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=7200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}