A vulnerability marked as critical has been reported in modelcontextprotocol java-sdk up to 0.x. Affected by this issue is some unknown functionality of the component Model Context Protocol. The manipulation leads to origin validation error.
This vulnerability is documented as CVE-2026-35568. The attack can be initiated remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
