Vibe Coding
MCP Server CVEs Keep Landing on the Same Two Bugs: Missing Auth and Path Traversal
July's MCP vulnerability roundup is dominated by two repeating shapes. CVE-2026-33032 (CVSS 9.8) in nginx-ui left the MCP message endpoint entirely unauthenticated; CVE-2026-40576 is a path traversal in excel-mcp-server through 0.1.7 letting unauthenticated attackers read, write, and overwrite arbitrary files under SSE or Streamable-HTTP transport. A scan of 10,000+ real-world servers found credentials, API keys, and PII leaking at rates above 10%. Given the 2026-07-28 spec's authorization hardening (RFC 9207 `iss` validation, credential-to-issuer binding), the auth story is improving at the spec layer while the long tail of community servers is not.
Source
↳ Follow the thread