metatool-ai

Unpatched MetaMCP Flaws Let Any Self-Registered User Run Commands and Hijack Other Tenants’ MCP Tool Sessions

MetaMCP CVE-2026-79538 (9.8) and CVE-2026-79537 (9.1) enable container code execution and cross-tenant MCP tool hijacking. No patch exists; mitigations inside.