Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-22 · source-backed
A large-scale analysis finds MCP clients issue blanket approvals to servers without per-caller permission scoping, enabling privilege escalation where any caller inherits another's elevated privileges. Directly actionable for multi-tenant MCP deployments. Source
Each link below shares sources, entities, or timing with this story.
Anthropic released MCP / Shared entity: MCP / Same source domain / What happened next / Tension
Linked by a graph relationship (Anthropic released MCP); both cover MCP; reported by the same outlet (arxiv.org).
Anthropic released MCP / Shared entity: Directly / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (Anthropic released MCP); both cover Directly; reported by the same outlet (arxiv.org).
Claude Code uses MCP / Shared entity: MCP / Same source domain / What happened next
Linked by a graph relationship (Claude Code uses MCP); both cover MCP; reported by the same outlet (arxiv.org).
Linked by a graph relationship (Claude Code uses MCP); both cover MCP; reported by the same outlet (arxiv.org).
Linked by a graph relationship (Claude Code uses MCP); both cover MCP; reported by the same outlet (arxiv.org).
Anthropic released MCP / Shared entity: MCP / Shared topic / What happened next
Linked by a graph relationship (Anthropic released MCP); both cover MCP; overlapping topics (another, authorization).
MCP deprecates Roots / Shared entity: MCP / Same source domain / What happened next
Linked by a graph relationship (MCP deprecates Roots); both cover MCP; reported by the same outlet (arxiv.org).
Microsoft supports MCP / Shared entity: MCP / Shared topic / What happened next
Linked by a graph relationship (Microsoft supports MCP); both cover MCP; overlapping topics (authorization, directly).