Anthropic’s Official MCP Python SDK Had an OAuth Credential-Stealing Flaw That Let Any Malicious Server Hijack Your Login

The official Python SDK for the Model Context Protocol — the open standard connecting AI applications to external tools and data — had a vulnerability that let any malicious MCP server steal the OAuth credentials its clients used to log in…