CVE-2026-27896: MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity

Published Feb 26, 2026
·
Updated

The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions prior to 1.3.1. Go's standard library performs case-insensitive matching of JSON keys to struct field tags — a field tagged json:"method" would also match "Method", "METHOD", etc. This violated the JSON-RPC 2.0 specification, which defines exact field names. A malicious MCP peer may have been able to send protocol messages with non-standard field casing that the SDK would silently accept. This had the potential for bypassing intermediary inspection and coss-implementation inconsistency. Go's standard JSON unmarshaling was replaced with a case-sensitive decoder in commit 7b8d81c. Users are advised to update to v1.3.1 to resolve this issue.

Other sources

The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing. Go's standard library performs case-insensitive matching of JSON keys to struct field tags — a field tagged json:"method" would also match "Method", "METHOD", etc. Additionally, Go's standard library folds the Unicode characters ſ (U+017F) and K (U+212A) to their ASCII equivalents s and k, meaning fields like "paramſ" would match "params". This violated the JSON-RPC 2.0 specification, which defines exact field names.

Impact:

A malicious MCP peer may have been able to send protocol messages with non-standard field casing (e.g., "Method" instead of "method") that the SDK would silently accept. This had the potential for: - Bypassing intermediary inspection: Proxies or policy layers that matched on exact field names may have failed to detect or filter these messages. - Cross-implementation inconsistency: Other MCP SDKs (TypeScript, Python) use case-sensitive parsing and would reject the same messages, creating potential security-boundary confusion.

Fix:

Go's standard JSON unmarshaling was replaced with a case-sensitive decoder (github.com/segmentio/encoding) in commit 7b8d81c. Users are advised to update to v1.3.1 to resolve this issue.

Credits: MCP Go SDK thanks Francesco Lacerenza (Doyensec) for reporting this issue.

GitHub

Affected Software

3 affected componentsFixes available
go/mcp-sdk<1.3.1
go/github.com/modelcontextprotocol/go-sdk<1.3.1
1.3.1
Lfprojects Mcp Go Sdk<1.3.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade go/github.com/modelcontextprotocol/go-sdk to a version that resolves this vulnerability.

    Fixed in 1.3.1
  2. Upgrade

    Upgrade Go MCP SDK to a version that resolves this vulnerability.

    Fixed in 1.3.1
  3. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch 7b8d81c

Event History

Feb 26, 2026
CVE Published
via MITRE·12:47 AM
Data Sourced
via MITRE·12:47 AM
DescriptionWeakness
Data Sourced
via Red Hat·01:02 AM
DescriptionSeverityAffected Software
Data Sourced
via NVD·01:16 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:16 AM
RemedyAffected Software
Advisory Published
via GitHub·10:20 PM
Data Sourced
via GitHub·10:20 PM
DescriptionWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-27896?

CVE-2026-27896 is classified as a moderate severity vulnerability due to improper handling of case sensitivity in JSON key matching.

2

How do I fix CVE-2026-27896?

To fix CVE-2026-27896, upgrade to version 1.3.1 or later of the Go MCP SDK.

3

What versions of the Go MCP SDK are affected by CVE-2026-27896?

Versions of the Go MCP SDK prior to 1.3.1 are affected by CVE-2026-27896.

4

What is the nature of the vulnerability in CVE-2026-27896?

CVE-2026-27896 involves improper handling of case sensitivity which can lead to unexpected behavior in JSON-RPC and MCP protocol message parsing.

5

Is there a workaround for CVE-2026-27896?

There are no known workarounds for CVE-2026-27896; updating to the fixed version is recommended.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203