OWASP Publishes First Official MCP Top 10 Vulnerability Classification

DEV Community·high signal

OWASP formally published a Top 10 vulnerability list specifically for Model Context Protocol — the first formal security taxonomy dedicated to MCP, indicating the community has accumulated sufficient CVE evidence to justify classification separate from general API security. Root causes map to conventional web classes (SSRF, path traversal, injection, unsafe deserialization) rather than novel AI-specific vectors. Server authors now have a formal checklist to audit against.