Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-17 · source-backed
Elastic found 43% of tested MCP implementations contain command injection flaws and 30% permit unrestricted URL fetching. Documents five named attack vectors: Tool Poisoning, Rug-Pull Redefinitions, Tool Name Collision, Orchestration Injection, and Traditional Code Vulnerabilities. Actionable defenses for each.
Each link below shares sources, entities, or timing with this story.
Cursor uses MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cursor uses MCP); both cover Defense, MCP, Tool Poisoning; overlapping topics (attack, injection, tool).
OpenAI supports MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (OpenAI supports MCP); both cover Tool Poisoning, URL; overlapping topics (attack, tool).
MCP uses Docker / Shared entities / Same source / Shared topic / What happened next
Linked by a graph relationship (MCP uses Docker); both cover Elastic, Elastic Security Labs, MCP; cite the same source (Elastic found).
Claude uses MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude uses MCP); both cover MCP, URL; overlapping topics (code, tool).
Cursor uses MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cursor uses MCP); both cover Defense, MCP; overlapping topics (code, tool).
Anthropic released MCP / Shared entity: MCP / Shared topic / What happened next / Tension
Linked by a graph relationship (Anthropic released MCP); both cover MCP; overlapping topics (attack, injection, tool).
Linked by a graph relationship (Anthropic released MCP); both cover MCP; overlapping topics (code, injection, tool).
Cursor uses MCP / Shared entity: MCP / Shared topic / What happened next / Tension
Linked by a graph relationship (Cursor uses MCP); both cover MCP; overlapping topics (attack, code, tool).