Security incidents involving Model Context Protocol servers and tooling: supply-chain campaigns, credential disclosure, path traversal, and SSRF. Each entry links to primary sources and the disclosed CVE where one exists.
Showing 11 - 14 of 14
A worm planted adversarial MCP configuration files (mcp.json) across 73 GitHub repositories, including Microsoft's azure/durabletask. Opening an affected repo in an AI coding agent auto-executed a credential-harvesting payload.
Command injection in the open-source gemini-mcp-tool MCP server, disclosed as a zero-day. CVSS 9.8.
Remote code execution in Mobile MCP through arbitrary Android intent execution from unvalidated URLs.
The nginx-ui MCP message endpoint performed no authentication on command-execution requests. An unauthenticated caller reaching the endpoint ran commands on the host. CVSS 9.8.