Threats·Cloud & SaaSCriticalUnpatched MetaMCP Flaws Let Any Self-Registered User Run Commands and Hijack Other Tenants’ MCP Tool SessionsMetaMCP CVE-2026-79538 (9.8) and CVE-2026-79537 (9.1) enable container code execution and cross-tenant MCP tool hijacking. No patch exists; mitigations inside.Mei-Lin Chen4 Oct 20266 min read
