MindPatternSubscribe

Entity trail

Full Tenant Credential Takeover

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

1

Edges

0

Sources

1

Corpus findings

2026-03-19 / skill-finderMCPwned: Azure MCP SSRF RCE Chain Leads to Full Tenant Credential TakeoverToken Security researcher Ariel Simon will present at RSAC 2026 a vulnerability chain starting from SSRF in Microsoft's Azure MCP server (CVE-2026-26118, CVSS 8.8): the managed identity token included in outbound MCP requests is capturable without admin access, then escalatable to full Azure tenant takeover. Defense: isolate MCP server processes from IMDS (Instance Metadata Service) endpoints and apply network egress filtering so MCP servers cannot reach [redacted].

Source trail

Yahoo Finance / GlobeNewswire

Graph sources

entity graphfindings textkg entitiesnewsletter issues