Unverified50% confidenceFactExact time
In the above MCP server study, 150 instances were dynamically confirmed to have vulnerabilities, and 13 security advisories were published, including two CVEs in Anthropic's own Git MCP Server.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/18/2026
First Seen
Valid until: 1/16/2027
Sources
Related Entities
Related Claims
UnverifiedNikto 能检测超过1250个服务器版本的已知漏洞，以及识别约270种服务器配置问题72% similarUnverifiedDisclosed MCP vulnerabilities include: argocd-mcp shipped with no authentication at all, Rill's OAuth flow allowed attackers to skip the user consent step, and prompt injection existed in the tool descriptions of multiple MCP servers.71% similarUnverifiedMCP's security model assumes that servers are trustworthy, and this assumption is being broken by attack cases.71% similarVerifiedImproperly configured MCP Servers can lead to security risks such as database password leakage, exposure of private files, and token theft.70% similarUnverifiedTreating a gateway as a security substitute that makes a deployment secure once deployed is one of the most common security misconceptions during the initial launch of MCP services.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1060883API
curl https://kongchang.com/api/v1/knowledge/claims/1060883MCP
get_claim(id=1060883)