Opening SecureFlowMCP Python SDK: Task IDs Cross the Session Ownership Boundary
Case summary & sources

AIDEFEND SecureFlow / SecureFlow Case Index

Model Context Protocol Python SDK aidefend-sf0070

MCP Python SDK: Task IDs Cross the Session Ownership Boundary

  • Tool Integrations & MCP
  • Data Exfiltration
  • Service Disruption & DoS

The MCP Python SDK connects AI applications to tools and supports experimental long-running tasks. When a multi-client server enabled the affected default task handlers, another client could list tasks, read results and cancel work without a task-owner check. CVE-2026-52870 was fixed for default generated task IDs in 1.27.2; explicitly supplied IDs and direct TaskStore writes need separate ownership review.

Mapped threat techniques

  • AML.T0085.001 Data from AI Services: AI Agent Tools

Source

Updated