Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-30 · source-backed
CVE-2026-81845, published August 28 at 6.3, covers arben-adm mcp-sequential-thinking through 0.5.0, where import_session and export_session accept a caller-supplied path with no boundary validation. Exploit is public. (NVD) Save and load is the most common place a path parameter goes unvalidated, so audit any MCP server you run that persists state.
Each link below shares sources, entities, or timing with this story.
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover August, CVE, MCP; overlapping topics (august, boundary).
Claude Code uses MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover CVE, NVD; reported by the same outlet (nvd.nist.gov).
Mastra supports MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Mastra supports MCP); both cover August, MCP; overlapping topics (audit, august).
Anthropic released MCP / Shared entities / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover August, CVE, NVD; earlier August coverage from 2026-08-09.
Cloudflare supports MCP / Shared entities / Earlier coverage
Linked by a graph relationship (Cloudflare supports MCP); both cover August, CVE, MCP; earlier August coverage from 2026-08-07.
Hermes Agent supports MCP / Shared entities / Same source domain / Shared topic
Linked by a graph relationship (Hermes Agent supports MCP); both cover August, CVE, NVD; reported by the same outlet (nvd.nist.gov).
Context7 uses MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Context7 uses MCP); both cover August, CVE, MCP, NVD; reported by the same outlet (nvd.nist.gov).
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover August, MCP; overlapping topics (audit, august).