Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-25 · source-backed
30 MCP CVEs Mapped Into Three Attack Layers — Comprehensive mapping: Layer 1 (Execution, 43%): 13 exec/shell injection CVEs. Layer 2 (Tooling, 20%): 6 CVEs targeting dev infrastructure — MCP Watch (a security scanner!) has command injection in its own repo cloning. Layer 3 (New classes, 14%): eval() and env var injection. 38% of 560 scanned servers have no auth. Your MCP security tools may themselves be vulnerable. (DEV Community / Kai Security)
Each link below shares sources, entities, or timing with this story.
Kai Security mapped all 30 CVEs into three attack layers: execution (43% — exec()/shell injection), tooling (20% — infrastructure attacks), and new attack classes (14% — eval() injection, env var injection). The flagship CVE is CVE-2026-0755 (Gemini MCP Tool, CVSS 9.8) with pu...
Two new attack classes emerged: Anthropic's own official Git MCP server has three CVEs (CVE-2025-68143/44/45) enabling RCE via prompt injection. MCP Watch, a security scanner designed to audit MCP servers, itself contains a command injection (CVE-2025-66401). MCPJam Inspector...
The MCP ecosystem now has 30 documented CVEs across six weeks spanning three attack layers: server-side injection (43%), protocol library flaws, and developer tooling vulnerabilities. Simultaneously, the AIUC-1 Consortium reports 80% of enterprises have observed risky agent be...
The MCP CVE count reached 30+, all sharing the same root cause: user-controlled input reaching exec()/eval() without sanitization. AgentAudit scanned 194 MCP packages and found 118 security findings across 68 packages — 14 rated critical or high. Anthropic's own Git MCP server...
(intermediate) — Audit for eval/exec/subprocess shell=True, replace with safe alternatives (ast.literal_eval, JSON parsers, execFile + arrays), implement allowlist validation, enable auth. (DEV Community / Kai Security)
The Model Context Protocol has a security problem that's no longer theoretical — it's statistical. Between January and February 2026, researchers filed 30+ CVEs against MCP servers, clients, and infrastructure. One package with nearly 500,000 downloads carried a CVSS 9.6 RCE....
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.