Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-17 · source-backed
Three CVEs in Anthropic's official Git MCP server enabled remote code execution via prompt injection. A malicious README or poisoned issue could trigger exploits without direct system access. git_init was removed entirely in the patch. Analysis of 7,000+ MCP servers found 36.7% may have latent SSRF exposure. If even Anthropic's own reference implementation had critical flaws, every MCP server needs a security audit.
Each link below shares sources, entities, or timing with this story.
Git MCP built by Anthropic / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Git MCP built by Anthropic); both cover Anthropic, Git MCP, MCP; overlapping topics (anthropic, audit, critical, cves, server).
Git MCP built by Anthropic / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Git MCP built by Anthropic); both cover Anthropic, MCP; reported by the same outlet (thehackernews.com).
Git MCP built by Anthropic / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Git MCP built by Anthropic); both cover Anthropic, MCP, SSRF; overlapping topics (anthropic, code, server).
Git MCP built by Anthropic / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Git MCP built by Anthropic); both cover Anthropic, Git MCP, MCP; overlapping topics (anthropic, audit, cves, server).
Git MCP built by Anthropic / Shared entities / Same source domain / What happened next / Tension
Linked by a graph relationship (Git MCP built by Anthropic); both cover Anthropic, MCP, SSRF; reported by the same outlet (thehackernews.com).
Git MCP built by Anthropic / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Git MCP built by Anthropic); both cover Anthropic, MCP; overlapping topics (anthropic, audit, critical, cves, server).
Git MCP built by Anthropic / Shared entities / Same source domain / What happened next
Linked by a graph relationship (Git MCP built by Anthropic); both cover Anthropic, MCP, SSRF; reported by the same outlet (thehackernews.com).
Cloudflare supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cloudflare supports MCP); both cover MCP, README, SSRF; overlapping topics (access, code).