Topic

MCP: news, advisories and analysis

20 articlesUpdated 23 Oct 2026

CyberSecureToday covers MCP across 20 articles published between 10 Sep 2026 and 23 Oct 2026. The coverage includes 17 vulnerability advisories and 3 analysis or guidance pieces. 16 advisories are rated critical or high severity.

Stories on MCP most often intersect with Model Context Protocol, AI Security and AWS, with Technology, Cloud & SaaS the most affected sector. The most recent story, “OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection”, was published 23 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ResearchCloud & SaaS
OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection
A critical vulnerability in OpenCode allows malicious Model Context Protocol servers to execute arbitrary shell commands on Windows and WSL hosts during OAuth.
Priya Raman23 Oct 202612 min read
ThreatsCloud & SaaSCritical
Anthropic Model Context Protocol Server Flaw Enables Host Directory Traversal and Unauthenticated Tool Injection (CVE-2026-70114)
Anthropic issues advisory CVE-2026-70114 for the Model Context Protocol (MCP) filesystem server, patching a path traversal flaw that allowed tool-calling escapes.
CST Editorial Desk11 Oct 20268 min read
ThreatsCloud & SaaSCritical
Anthropic Model Context Protocol Flaw Permits Indirect Prompt Injection Across Claude Enterprise Tool Callers
Anthropic and open-source MCP maintainers resolve CVE-2026-49110, an indirect prompt injection vulnerability allowing unauthorized tool execution in agentic pipelines.
Aisha Noor8 Oct 20268 min read
ThreatsCloud & SaaSCritical
Azure AI Foundry MCP Agentic Execution Flaw Enables Cross-Tenant Tool Hijacking CVE-2026-89104
Microsoft MSRC advisory documents a critical model-context-protocol tool injection flaw in Azure AI Foundry enabling indirect agentic tool hijacking.
Aisha Noor6 Oct 20268 min read
NewsCloud & SaaS
AWS Security Bulletin Details Argument Injection Flaw in Model Context Protocol Security Agent (CVE-2026-97662)
AWS Security Bulletin 2026-121-AWS addresses an argument injection defect in security-agent-mcp-server diff scanning that permits arbitrary file modification.
Aisha Noor5 Oct 20268 min read
ThreatsCloud & SaaSCritical
AWS Loom AI Agent Platform Flaw Gave Unauthenticated Attackers Super-Admin Control
CVE-2026-103956 in AWS Labs Loom (CVSS 10.0) let any network client act as super-admin on IdP-less deployments. Two SSRF flaws leaked tokens. Upgrade to 1.7.0+.
Aisha Noor4 Oct 20267 min read
ThreatsCloud & SaaSHigh
Office PowerPoint MCP Server Path Traversal Enables Indirect Prompt Injection File Overwrite (CVE-2025-71427)
A path traversal vulnerability in the Office-PowerPoint Model Context Protocol server allows AI agents to be manipulated via prompt injection into overwriting host files.
Priya Raman2 Oct 20268 min read
ThreatsCloud & SaaSCritical
Kubernetes MCP Server Structured Tool Argument Injection Exposes Cluster Service Credentials (CVE-2026-61459)
A critical flaw in Model Context Protocol (MCP) Kubernetes bridge servers allows attackers to inject malicious flags into kubectl tool calls, exposing cluster service tokens.
CST Editorial Desk30 Sep 202611 min read
ThreatsCloud & SaaSCritical
Nginx UI Model Context Protocol Endpoint Missing Authentication Enables Unauthenticated RCE CVE-2026-33032
A critical CVSS 9.8 vulnerability in Nginx UI permits unauthenticated attackers to execute arbitrary commands via exposed Model Context Protocol endpoints.
Daniel Okafor28 Sep 20269 min read
ThreatsCloud & SaaSCritical
Code Runner MCP Server Flaw Enables Unauthenticated Remote Code Execution on Hosts
A critical CVSS 9.8 remote code execution vulnerability in Code Runner Model Context Protocol servers permits arbitrary host code execution via untrusted AI agent tool calls.
Daniel Okafor27 Sep 20269 min read
ThreatsCloud & SaaSHigh
Atlassian Model Context Protocol Server Flaws Enable Unauthenticated Arbitrary File Exfiltration CVE-2026-77248
Critical authentication bypass and path traversal vulnerabilities in the Atlassian Model Context Protocol server allow unauthenticated attackers to read and exfiltrate host files.
Daniel Okafor27 Sep 20268 min read
ThreatsCloud & SaaSHigh
AWS Transform MCP Server Flaw Enables Arbitrary File Overwrites in Agent Workflows
AWS Security Bulletin 2026-075-AWS discloses critical path traversal flaw CVE-2026-18953 in aws-transform-mcp-server enabling unauthenticated arbitrary file overwrites.
Daniel Okafor26 Sep 202614 min read
ThreatsCloud & SaaSHigh
MCP-Fetch Tool Flaw Exposes AI Agent Infrastructure to IPv6 SSRF Attacks
Security researchers disclose CVE-2026-80347 in mcp-fetch, where unbracketed IPv6 parsing allows autonomous AI agents to be manipulated into internal cloud SSRF.
Daniel Okafor26 Sep 202615 min read
ThreatsCloud & SaaSHigh
AWS HealthLake MCP Server SSRF Flaw Exposes IAM Credentials and Healthcare Data
AWS discloses high-severity SSRF flaw CVE-2026-15643 in the HealthLake MCP server, enabling attackers to leak temporary SigV4 IAM credentials and healthcare FHIR records.
Priya Raman26 Sep 202617 min read
InsightsCloud & SaaS
Model Context Protocol OAuth Passthrough Flaw Exposes Autonomous AI Tool Pipelines to Silent Impersonation
An architectural vulnerability in Model Context Protocol (MCP) OAuth token passthrough allows malicious tool servers to impersonate users and hijack enterprise APIs.
Priya Raman25 Sep 202618 min read
ThreatsCloud & SaaSHigh
AWS Security Agent, MCP Server Flaws Let S3 Squatters Intercept Source Code
AWS patches vulnerabilities CVE-2026-87912 and CVE-2026-87913 in DevSecOps security agents and Model Context Protocol servers where predictable bucket names permit source code theft.
Aisha Noor21 Sep 202614 min read
ThreatsCloud & SaaSCritical
LiteLLM MCP Server Creation Flaw CVE-2026-30623 Enables Remote Code Execution via Malicious Tool Configurations
Critical CVSS 9.8 flaw CVE-2026-30623 in LiteLLM allows remote attackers to execute arbitrary operating system commands via unvalidated Model Context Protocol server parameters.
Mei-Lin Chen21 Sep 202614 min read
InsightsCloud & SaaS
Malicious MCP Servers Exploit OAuth Metadata Flaw in Rust SDK to Hijack Enterprise Agent Tokens
Critical OAuth metadata flaw CVE-2026-63127 in rmcp Rust SDK allows rogue Model Context Protocol servers to capture enterprise agent tokens and impersonate identities.
Priya Raman20 Sep 202613 min read
ThreatsCloud & SaaSHigh
AWS API MCP Server Flaw Let AI Agents Bypass Security Policies
AWS Labs resolves high-severity vulnerability CVE-2026-16584 in AWS API MCP Server allowing autonomous AI agent workflows to bypass security policies upon initialization failure.
Daniel Okafor19 Sep 202611 min read
ThreatsCloud & SaaSHigh
LiteLLM and Kestra in KEV: exploited AI tooling is now a vulnerability management problem
CISA added 15 CVEs to the KEV catalog in six working days, including exploited flaws in LiteLLM and Kestra — AI tooling that most asset inventories never see.
Daniel Okafor10 Sep 20266 min read