diff --git a/tests/e2e/mcp/vulnerable-server/package-lock.json b/tests/e2e/mcp/vulnerable-server/package-lock.json
index 2d47d591..0d4aeb41 100644
--- a/tests/e2e/mcp/vulnerable-server/package-lock.json
+++ b/tests/e2e/mcp/vulnerable-server/package-lock.json
@@ -8,7 +8,7 @@
       "name": "@keyvaluesystems/agent-opfor-test-mcp-vulnerable",
       "version": "0.10.2",
       "devDependencies": {
-        "@modelcontextprotocol/sdk": "^1.12.0",
+        "@modelcontextprotocol/sdk": "^1.32.0",
         "tsx": "^4.20.0",
         "typescript": "^5.8.3",
         "zod": "^3.0.0"
@@ -470,13 +470,13 @@
       }
     },
     "node_modules/@modelcontextprotocol/sdk": {
-      "version": "1.29.0",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.29.0.tgz",
-      "integrity": "sha512-zo37mZA9hJWpULgkRpowewez1y6ML5GsXJPY8FI0tBBCd77HEvza4jDqRKOXgHNn867PVGCyTdzqpz0izu5ZjQ==",
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.32.0.tgz",
+      "integrity": "sha512-8BviX/hK4Gd2eL1KdTwm0gfl4d3wdoErW0Jd00h6nomUAtk6IJk5vwQJc6kfWtJTzN5OEV/lgIiJKI8fiDGAlA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@hono/node-server": "^1.19.9",
+        "@hono/node-server": "^1.19.9 || ^2.0.5",
         "ajv": "^8.17.1",
         "ajv-formats": "^3.0.1",
         "content-type": "^1.0.5",
diff --git a/tests/e2e/mcp/vulnerable-server/package.json b/tests/e2e/mcp/vulnerable-server/package.json
index d0f60baa..8109029a 100644
--- a/tests/e2e/mcp/vulnerable-server/package.json
+++ b/tests/e2e/mcp/vulnerable-server/package.json
@@ -10,7 +10,7 @@
     "build": "tsc"
   },
   "devDependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.0",
+    "@modelcontextprotocol/sdk": "^1.32.0",
     "tsx": "^4.20.0",
     "typescript": "^5.8.3",
     "zod": "^3.0.0"