Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-03 · source-backed
Two new attack classes emerged: Anthropic's own official Git MCP server has three CVEs (CVE-2025-68143/44/45) enabling RCE via prompt injection. MCP Watch, a security scanner designed to audit MCP servers, itself contains a command injection (CVE-2025-66401). MCPJam Inspector exposes an unauthenticated HTTP endpoint on 0.0.0.0 that can install arbitrary MCP servers. The attack surface is now expanding from end-users to the developers building MCP infrastructure. DEV Community
Each link below shares sources, entities, or timing with this story.
Anthropic released MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVE, CVEs, HTTP; overlapping topics (cves, injection, server).
Anthropic released MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVEs, DEV Community, Git MCP; reported by the same outlet (dev.to).
Anthropic released MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVEs, MCP, RCE; overlapping topics (anthropic, audit, command, cves, injection).
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVE, CVEs, MCP; overlapping topics (anthropic, arbitrary, audit, command, cves).
Anthropic released MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVE, HTTP, MCP; overlapping topics (attack, injection).
Claude Code uses MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude Code uses MCP); both cover CVE, CVEs, MCP, RCE; overlapping topics (attack, audit, cves).
Microsoft supports MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, CVEs, MCP, RCE; overlapping topics (attack, audit, server).
Anthropic released MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVE, MCP; overlapping topics (anthropic, arbitrary, audit, command, injection).