Topic

Model Context Protocol: news, advisories and analysis

24 articlesUpdated 23 Oct 2026

CyberSecureToday covers Model Context Protocol across 24 articles published between 19 Sep 2026 and 23 Oct 2026. The coverage includes 18 vulnerability advisories and 6 analysis or guidance pieces. 17 advisories are rated critical or high severity.

Stories on Model Context Protocol most often intersect with MCP, AI Security and Prompt Injection, with Technology, Cloud & SaaS the most affected sector. The most recent story, “OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection”, was published 23 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ResearchCloud & SaaS
OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection
A critical vulnerability in OpenCode allows malicious Model Context Protocol servers to execute arbitrary shell commands on Windows and WSL hosts during OAuth.
Priya Raman23 Oct 202612 min read
InsightsCloud & SaaS
Singapore CSA Releases National Cybersecurity Framework for Enterprise Frontier AI and Agentic Deployments
CSA Singapore issues technical guidelines for securing frontier and autonomous agentic AI models, mandating rigorous defenses against indirect prompt injection and tool-calling escapes.
Mei-Lin Chen21 Oct 202614 min read
ThreatsCloud & SaaSCritical
Claude Agent SDK Argument Injection Flaw Enables Command Execution via MCP Configuration
Anthropic resolves a critical argument injection defect in Claude Agent SDK (CVE-2026-96620, CVSS 9.2) that allows untrusted session parameters to execute arbitrary OS commands.
Aisha Noor17 Oct 20268 min read
ThreatsCloud & SaaSCritical
Anthropic Model Context Protocol Server Flaw Enables Host Directory Traversal and Unauthenticated Tool Injection (CVE-2026-70114)
Anthropic issues advisory CVE-2026-70114 for the Model Context Protocol (MCP) filesystem server, patching a path traversal flaw that allowed tool-calling escapes.
CST Editorial Desk11 Oct 20268 min read
ThreatsCloud & SaaSCritical
Anthropic Model Context Protocol Flaw Permits Indirect Prompt Injection Across Claude Enterprise Tool Callers
Anthropic and open-source MCP maintainers resolve CVE-2026-49110, an indirect prompt injection vulnerability allowing unauthorized tool execution in agentic pipelines.
Aisha Noor8 Oct 20268 min read
InsightsCloud & SaaS
Why Prompt Guards Cannot Stop Agentic RCE: The Case for MicroVM Isolation in Tool-Calling Pipelines
Recent CVEs in Ollama and AWS MCP reveal that semantic prompt filters cannot prevent tool injection. Engineering teams must isolate agent tools in ephemeral microVMs.
Aisha Noor6 Oct 20268 min read
ThreatsCloud & SaaSCritical
Azure AI Foundry MCP Agentic Execution Flaw Enables Cross-Tenant Tool Hijacking CVE-2026-89104
Microsoft MSRC advisory documents a critical model-context-protocol tool injection flaw in Azure AI Foundry enabling indirect agentic tool hijacking.
Aisha Noor6 Oct 20268 min read
NewsCloud & SaaS
AWS Security Bulletin Details Argument Injection Flaw in Model Context Protocol Security Agent (CVE-2026-97662)
AWS Security Bulletin 2026-121-AWS addresses an argument injection defect in security-agent-mcp-server diff scanning that permits arbitrary file modification.
Aisha Noor5 Oct 20268 min read
ThreatsCloud & SaaSCritical
MetaMCP Flaws, Still Unpatched, Allow Command Execution and Cross-Tenant Session Hijacking
MetaMCP CVE-2026-79538 (9.8) and CVE-2026-79537 (9.1) enable container code execution and cross-tenant MCP tool hijacking. No patch exists; mitigations inside.
Mei-Lin Chen4 Oct 20266 min read
ThreatsCloud & SaaSHigh
Office PowerPoint MCP Server Path Traversal Enables Indirect Prompt Injection File Overwrite (CVE-2025-71427)
A path traversal vulnerability in the Office-PowerPoint Model Context Protocol server allows AI agents to be manipulated via prompt injection into overwriting host files.
Priya Raman2 Oct 20268 min read
ThreatsCloud & SaaSCritical
Kubernetes MCP Server Structured Tool Argument Injection Exposes Cluster Service Credentials (CVE-2026-61459)
A critical flaw in Model Context Protocol (MCP) Kubernetes bridge servers allows attackers to inject malicious flags into kubectl tool calls, exposing cluster service tokens.
CST Editorial Desk30 Sep 202611 min read
ResearchCloud & SaaS
Cascading Failure in Multi-Agent AI Swarms: Indirect Prompt Injection Across Autonomous Tool-Calling Pipelines
Deep-dive security research demonstrating how indirect prompt injection exploits Model Context Protocol (MCP) to trigger cascading failures across multi-agent swarms.
Daniel Okafor28 Sep 202612 min read
ThreatsCloud & SaaSCritical
Nginx UI Model Context Protocol Endpoint Missing Authentication Enables Unauthenticated RCE CVE-2026-33032
A critical CVSS 9.8 vulnerability in Nginx UI permits unauthenticated attackers to execute arbitrary commands via exposed Model Context Protocol endpoints.
Daniel Okafor28 Sep 20269 min read
ThreatsCloud & SaaSCritical
Code Runner MCP Server Flaw Enables Unauthenticated Remote Code Execution on Hosts
A critical CVSS 9.8 remote code execution vulnerability in Code Runner Model Context Protocol servers permits arbitrary host code execution via untrusted AI agent tool calls.
Daniel Okafor27 Sep 20269 min read
ThreatsCloud & SaaSHigh
Atlassian Model Context Protocol Server Flaws Enable Unauthenticated Arbitrary File Exfiltration CVE-2026-77248
Critical authentication bypass and path traversal vulnerabilities in the Atlassian Model Context Protocol server allow unauthenticated attackers to read and exfiltrate host files.
Daniel Okafor27 Sep 20268 min read
ThreatsCloud & SaaSHigh
AWS Transform MCP Server Flaw Enables Arbitrary File Overwrites in Agent Workflows
AWS Security Bulletin 2026-075-AWS discloses critical path traversal flaw CVE-2026-18953 in aws-transform-mcp-server enabling unauthenticated arbitrary file overwrites.
Daniel Okafor26 Sep 202614 min read
ThreatsCloud & SaaSHigh
MCP-Fetch Tool Flaw Exposes AI Agent Infrastructure to IPv6 SSRF Attacks
Security researchers disclose CVE-2026-80347 in mcp-fetch, where unbracketed IPv6 parsing allows autonomous AI agents to be manipulated into internal cloud SSRF.
Daniel Okafor26 Sep 202615 min read
ThreatsCloud & SaaSHigh
AWS HealthLake MCP Server SSRF Flaw Exposes IAM Credentials and Healthcare Data
AWS discloses high-severity SSRF flaw CVE-2026-15643 in the HealthLake MCP server, enabling attackers to leak temporary SigV4 IAM credentials and healthcare FHIR records.
Priya Raman26 Sep 202617 min read
InsightsCloud & SaaS
Model Context Protocol OAuth Passthrough Flaw Exposes Autonomous AI Tool Pipelines to Silent Impersonation
An architectural vulnerability in Model Context Protocol (MCP) OAuth token passthrough allows malicious tool servers to impersonate users and hijack enterprise APIs.
Priya Raman25 Sep 202618 min read
ThreatsCloud & SaaSHigh
AWS Security Agent, MCP Server Flaws Let S3 Squatters Intercept Source Code
AWS patches vulnerabilities CVE-2026-87912 and CVE-2026-87913 in DevSecOps security agents and Model Context Protocol servers where predictable bucket names permit source code theft.
Aisha Noor21 Sep 202614 min read
ThreatsCloud & SaaSCritical
LiteLLM MCP Server Creation Flaw CVE-2026-30623 Enables Remote Code Execution via Malicious Tool Configurations
Critical CVSS 9.8 flaw CVE-2026-30623 in LiteLLM allows remote attackers to execute arbitrary operating system commands via unvalidated Model Context Protocol server parameters.
Mei-Lin Chen21 Sep 202614 min read
ThreatsCloud & SaaSHigh
Amazon DynamoDB Model Context Protocol Server Code Injection Flaw Enables Arbitrary Host Execution
AWS releases security bulletin 2026-097-AWS for CVE-2026-85654 in DynamoDB MCP server, where template injection enables arbitrary host command execution.
CST Editorial Desk20 Sep 202614 min read
InsightsCloud & SaaS
Malicious MCP Servers Exploit OAuth Metadata Flaw in Rust SDK to Hijack Enterprise Agent Tokens
Critical OAuth metadata flaw CVE-2026-63127 in rmcp Rust SDK allows rogue Model Context Protocol servers to capture enterprise agent tokens and impersonate identities.
Priya Raman20 Sep 202613 min read
ThreatsCloud & SaaSHigh
AWS API MCP Server Flaw Let AI Agents Bypass Security Policies
AWS Labs resolves high-severity vulnerability CVE-2026-16584 in AWS API MCP Server allowing autonomous AI agent workflows to bypass security policies upon initialization failure.
Daniel Okafor19 Sep 202611 min read