Agents
40+ MCP CVEs and a ZDI scan of 19,000 servers reframe agent security as a permanent line item, not an incident
Forkast tallies the ecosystem crossing into structural territory: 40+ disclosed CVEs, ~15,930 active public servers across four registries, and a Zero Day Initiative scan of 19,000 MCP servers extrapolating 600–1,650 as exploitable. Of the vulnerable implementations, 26% carried SQL injection and 22.5% RCE — and 42% of vulnerable repos correlated with AI-generated code, meaning AI-assisted development is producing and exposing insecure MCP deployments simultaneously. The Langflow chain (CVE-2026-33017 + CVE-2026-55255) was weaponized to harvest LLM provider keys and cloud credentials within 20 hours of disclosure.
Source
↳ Follow the thread