RUSTSEC-2026-0461

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2026-0461

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0461.json

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2026-0461

Aliases

GHSA-4432-vg92-fqh6

Published

2026-10-20T12:00:00Z

Modified

2026-11-09T10:15:02Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Unbounded tool schema cache in Streamable HTTP server transport

Details

From 3.0.0 until 3.6.0, StreamableHttpService cached the result of ServerHandler::get_tool in a process-wide map keyed by the tool name of incoming tools/call requests. The map had no size limit and no eviction, and it also cached unknown tool names.

An entry was added while the request headers were validated, before the request could be rejected, so requests answered with HTTP 400 still grew the map. A client that can reach the endpoint can send tools/call requests with distinct tool names, each up to the default 4 MiB body limit, until the server runs out of memory. rmcp does not authenticate requests itself, so servers without an authentication layer in front of the endpoint are exposed to unauthenticated clients.

Only servers that use the Streamable HTTP server transport and receive requests at protocol version 2026-07-28 or later are affected.

The flaw was corrected in 3.6.0 by removing the cache. The transport now calls ServerHandler::get_tool on each request.

If you cannot upgrade, put authentication in front of the endpoint, or reject tools/call requests for unknown tool names before they reach StreamableHttpService.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / rmcp

Package

Name: rmcp; View open source insights on deps.dev
Purl: pkg:cargo/rmcp

Affected ranges

Type: SEMVER
Events: Introduced

3.0.0

Fixed

3.6.0

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "arch": [],
        "functions": [],
        "os": []
    }
}