AI and Tech Summaries - AI Weekly Malaysia

Summaries

Short AI and tech summaries with source links, signal scores, and why each update matters for builders, founders, and Malaysian tech workers.

Window

Today Yesterday This week Last week This month Last month All time

Showing 1-1 of 1 results

Date	Provider	Score	Summary
29 Sep 2026, 2:08 PM	The Hacker News	8.0	Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials The maintainers of the official MCP Python SDK published a security advisory saying a malicious MCP server could point a client at an attacker-controlled token endpoint, causing the SDK to send the client secret, authorization code, and PKCE proof key to the attacker instead of the real login service. Cycode, which reported the flaw, demonstrated the full exchange in a test and says the resulting access token carries whatever permissions the app was granted; because the client secret is long-lived, it keeps working until changed. Fixed in SDK versions 1.30.0 and 2.2.0; scored 7.5 for the two providers that run without a person present and 6.5 for the interactive provider, with no CVE assigned as of September 29. Why: If your Python MCP client connects over HTTP using OAuthClientProvider or ClientCredentialsOAuthProvider on a version below 1.30.0/2.2.0, the server you connect to could have redirected your client secret, auth code, and PKCE key to itself — so upgrade, and then rotate the client secret, because the fix does not invalidate a secret that already leaked. Note the interactive case still requires a human to approve a page that Cycode says is the genuine login page, so user approval is not a defence here. mcp security oauth ai-agents python

Date

Provider

Score

Summary

29 Sep 2026, 2:08 PM

The Hacker News

8.0

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

The maintainers of the official MCP Python SDK published a security advisory saying a malicious MCP server could point a client at an attacker-controlled token endpoint, causing the SDK to send the client secret, authorization code, and PKCE proof key to the attacker instead of the real login service. Cycode, which reported the flaw, demonstrated the full exchange in a test and says the resulting access token carries whatever permissions the app was granted; because the client secret is long-lived, it keeps working until changed. Fixed in SDK versions 1.30.0 and 2.2.0; scored 7.5 for the two providers that run without a person present and 6.5 for the interactive provider, with no CVE assigned as of September 29.

Why: If your Python MCP client connects over HTTP using OAuthClientProvider or ClientCredentialsOAuthProvider on a version below 1.30.0/2.2.0, the server you connect to could have redirected your client secret, auth code, and PKCE key to itself — so upgrade, and then rotate the client secret, because the fix does not invalidate a secret that already leaked. Note the interactive case still requires a human to approve a page that Cycode says is the genuine login page, so user approval is not a defence here.