Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-01 · source-backed
Kai Security mapped all 30 CVEs into three attack layers: execution (43% — exec()/shell injection), tooling (20% — infrastructure attacks), and new attack classes (14% — eval() injection, env var injection). The flagship CVE is CVE-2026-0755 (Gemini MCP Tool, CVSS 9.8) with public PoC and active exploitation.
Each link below shares sources, entities, or timing with this story.
30 MCP CVEs Mapped Into Three Attack Layers — Comprehensive mapping: Layer 1 (Execution, 43%): 13 exec/shell injection CVEs. Layer 2 (Tooling, 20%): 6 CVEs targeting dev infrastructure — MCP Watch (a security scanner!) has command injection in its own repo cloning. Layer 3 (Ne...
Two new attack classes emerged: Anthropic's own official Git MCP server has three CVEs (CVE-2025-68143/44/45) enabling RCE via prompt injection. MCP Watch, a security scanner designed to audit MCP servers, itself contains a command injection (CVE-2025-66401). MCPJam Inspector...
The Model Context Protocol has a security problem that's no longer theoretical — it's statistical. Between January and February 2026, researchers filed 30+ CVEs against MCP servers, clients, and infrastructure. One package with nearly 500,000 downloads carried a CVSS 9.6 RCE....
Thirty CVEs in sixty days. That's the MCP ecosystem's security track record for 2026 so far, and the severity is climbing. Three disclosures dropped this week that should make anyone running agent infrastructure pause. First, PraisonAI, a popular multi-agent orchestration fram...
If you run n8n, stop reading and go patch. Right now. Pillar Security researcher Eilon Cohen disclosed four critical vulnerabilities in n8n, the open-source workflow automation platform with 181K GitHub stars. The worst one, CVE-2026-27493 (CVSS 9.5), allows unauthenticated ex...
CVE-2026-33010 dropped March 20 with a CVSS 8.1, targeting mcp-memory-service — the open-source memory backend that a large number of multi-agent deployments use for persistent agent recall. The vulnerability is straightforward and devastating: when HTTP mode is enabled with a...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.