Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-04 · source-backed
Three attack vectors: (1) Hooks-based RCE via .claude/settings.json executing shell commands on SessionStart without confirmation, (2) MCP consent bypass via repo-controlled config auto-approving all servers, (3) API key exfiltration via ANTHROPIC_BASE_URL pointing to attacker endpoint. All patched. Always review .claude/ config files before opening untrusted repositories. (Check Point Research)
Each link below shares sources, entities, or timing with this story.
Claude uses MCP / Shared entities / Same source / Shared topic / What happened next / Tension
Linked by a graph relationship (Claude uses MCP); both cover Check Point Research, CVE, RCE; cite the same source (Check Point Research).
Claude Code uses MCP / Shared entities / Same source / Shared topic / What happened next
Linked by a graph relationship (Claude Code uses MCP); both cover Check Point Research, CVE; cite the same source (Check Point Research).
Claude Code uses MCP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover Check Point Research, CVE, MCP; cite the same source (Check Point Research).
Claude Code uses MCP / Shared entities / Same source / Shared topic / What happened next
Linked by a graph relationship (Claude Code uses MCP); both cover Check Point Research, CVE; cite the same source (Check Point Research).
Cursor uses MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Cursor uses MCP); both cover MCP, RCE; overlapping topics (attack, claude, code, config).
Microsoft supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, MCP, RCE; overlapping topics (attack, code).
Microsoft supports MCP / Shared entities / What happened next / Tension
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, MCP, RCE; picks up the CVE thread on 2026-03-23.
Shared entities / Same source / Shared topic / Earlier coverage
Both cover Check Point Research, CVE, RCE, SessionStart; cite the same source (Check Point Research); overlapping topics (check, claude, code, command, config).