Official MCP Python SDK flaw could let malicious servers steal OAuth credentials and swap them for valid tokens via attacker-controlled endpoints. Upgrade to 1.30.0 or 2.2.0 and check issuer settings. #MCPPythonSDK #OAuth #Cycode