Agents30 MCP CVEs total - MCP security crisis crystallizesWweb·medium signalXBlueskyLinkedInCopy link30 CVEs since late 2024 launch. Q1 2026 alone produced ~15. 36.7% SSRF rate, ~10% servers compromised. BlueRock Trust Registry scans 7100+ servers. Noma Security MCP guardrails launched. OAuth 2.1 spec criticized as mess for enterprise. Go SDK parsing bypass CVE-2026-27896.↳ Follow the threadShared entity / Threat patternTrackMCP Launches as 'Google Analytics for MCP Servers' and Lands Product Hunt's #9 SlotProduct HuntShared entity / Threat patternFable 5.1 generated a 1km square game zone in Blender in one shot by chaining two MCP servers on its ownr/ClaudeAIShared entity / Stack layerAWS open-sourced a HyperPod control plane that exposes 38 MCP tools with parameter validation before executionAWS Machine Learning BlogShared entity / Threat patternTenable and OpenAI Are Building a Security Review Gate for Community MCP Servers and SkillsTenablePolicy dependency / Stack layerMoadim Ships an MIT-Licensed Scheduler That Runs Coding Agents on a Cron Instead of a PromptMoadim, via Hacker News Show HNStack layer / Threat patternAstra's prompt-injection attack success rate is 8.5% against 27.0% for GPT-5.6 Sol on Gray Swan's IPI ArenaOpenAI Deployment Safety HubShared entity / Threat patternOpenSpender Puts a Self-Custodial Wallet on Agents So They Can Pay Each Other With No MarkupOpenSpender (Trigger Labs), via Hacker News Show HNPolicy dependency / Stack layerbrowser-use 0.13.10 exact-pins every dependency and stops reporting unknown MCP tool calls as successesGitHub