OX Security disclosed Anthropic MCP runs any process command on the host. This holds whether a valid MCP server initiali...

OX Security disclosed Anthropic MCP runs any process command on the host. This holds whether a valid MCP server initializes. MCP is the link from AI tools to a machine. The flaw spans every official SDK (Python, TypeScript, Java, Rust). CVEs hit MCP Inspector, LibreChat, Cursor, and others. Anthropic confirmed the behavior intentional. When the vendor declines to fix the remote code execution path, defense moves to the application layer.#AI #CyberSecurity #InfoSec #MCP

Read Original

Related