Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-25 · source-backed
The MCP CVE count reached 30+, all sharing the same root cause: user-controlled input reaching exec()/eval() without sanitization. AgentAudit scanned 194 MCP packages and found 118 security findings across 68 packages — 14 rated critical or high. Anthropic's own Git MCP server had 3 CVEs enabling RCE via prompt injection (patched). Across 16 responsible disclosures to network-exposed MCP servers, response rates were low. Action: Audit every MCP server you use for eval()/exec() calls with user input. Use mcp-scan for automated detection. (DEV Community / Kai Security)
Each link below shares sources, entities, or timing with this story.
Anthropic released MCP / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVEs, DEV Community, Git MCP; reported by the same outlet (dev.to).
Anthropic released MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Anthropic released MCP); both cover Action, Audit, CVEs, MCP; overlapping topics (action, audit, critical, cves).
Anthropic released MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, Audit, CVEs, MCP; overlapping topics (cves, server).
Anthropic released MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVEs, MCP, RCE; overlapping topics (anthropic, audit, critical, cves, server).
Anthropic released Claude / Shared entities / Same source domain / Shared topic / What happened next / Tension
Linked by a graph relationship (Anthropic released Claude); both cover Anthropic, Audit, MCP; reported by the same outlet (dev.to).
Anthropic released MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVEs, MCP, RCE; overlapping topics (audit, server).
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, Audit, MCP, RCE; overlapping topics (anthropic, audit).
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, Git MCP, MCP; overlapping topics (anthropic, audit, critical, cves, server).