Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-09 · source-backed
Akamai disclosed SQL injection in the Apache Doris MCP server, an unauthenticated metadata-exfiltration flaw in Alibaba's RDS MCP, and a potential takeover in Apache Pinot's MCP. The failure modes are boring and that's the point. Unsanitized SQL input, missing authentication, unauthenticated data exposure. Classic web-app bugs shipping in MCP servers because nobody treated the MCP layer as a real network boundary. "One is a fluke, three is a pattern." If you expose a database through MCP, parameterize every query, require auth on every endpoint, and run it through the same review you'd give any public API.
Each link below shares sources, entities, or timing with this story.
Adversa AI criticizes MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Akamai, Apache Doris MCP, MCP, SQL; overlapping topics (akamai, alibaba, apache, auth, server).
Akamai criticizes Apache Pinot / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Akamai criticizes Apache Pinot); both cover Alibaba, Apache Pinot, MCP, SQL; overlapping topics (alibaba, apache, database, flaw, server).
Microsoft supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft supports MCP); both cover Akamai, MCP; overlapping topics (auth, flaw, server).
Anthropic released MCP / Shared entities / What happened next / Tension
Linked by a graph relationship (Anthropic released MCP); both cover Alibaba, MCP; picks up the Alibaba thread on 2026-08-13.
Linked by a graph relationship (Anthropic released MCP); both cover Classic, MCP; picks up the Classic thread on 2026-07-23.
Anthropic released MCP / Shared entity: MCP / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Anthropic released MCP); both cover MCP; overlapping topics (auth, authentication, server).
Cursor uses MCP / Shared entity: MCP / Shared topic / What happened next / Tension
Linked by a graph relationship (Cursor uses MCP); both cover MCP; overlapping topics (data, server).
Microsoft supports MCP / Shared entity: MCP / Shared topic / What happened next
Linked by a graph relationship (Microsoft supports MCP); both cover MCP; overlapping topics (auth, authentication, server).