TLDR Tech / IT
RCE by design: MCP architectural choice haunts AI agent ecosystem
Researchers at OX Security identified critical RCE vulnerabilities in the Model Context Protocol (MCP) due to unsafe STDIO command defaults. The flaw affects numerous AI frameworks and tools, resulting in over 30 reported vulnerabilities and 10 CVEs across thousands of servers and 200 open-source projects.
Read the full story