Tag: MCP
OpenCode shipped the fix but left scanners with nothing to see
Builds 1.0.137 through 1.18.32 can run a command from a malicious MCP server at sign-in, and no CVE was filed…
Langflow MCP bug draws 1,423 exploit attempts from 27 addresses
An authenticated flaw that passes a user-supplied command straight to bash is being hammered by attackers who only need one…
A rogue MCP server can walk off with your OAuth tokens
A malicious MCP server can redirect a client's OAuth handshake and pocket the secrets.
Amazon’s Kiro IDE leaks data when poisoned projects get opened
A prompt injection flaw in Amazon's Kiro IDE can push sensitive local data to attackers when a poisoned project is…
New Attack Exploits AI Coding Agents via Sentry Error Platform
Tenet Security researchers discovered a technique called Agentjacking that uses crafted Sentry error reports to trick AI coding assistants into…
CVE MCP Server Turns Claude Into a Fully Capable Security Analyst With 27 Tools Across 21 APIs
An open-source MCP server transforms Claude AI into a security analyst with 27 tools spanning 21 APIs for CVE lookup,…