Taggart on Mythryl: “Oh look, another MCP vuln (or 3) from failure to sanitize input. You…”

Oh look, another MCP vuln (or 3) from failure to sanitize input. You and I both know how these are getting written. You and I both know the training material is not vetted for secure code. This will not stop and will only get worse.

cyata.aiCyata Research: Breaking Anthropic's Official MCP Server - Cyata | The Control Plane for Agentic IdentityHow We Found Code Execution in Anthropic’s Official Git MCP Server TL;DR What happened: Cyata discovered three security vulnerabilities in mcp-server-git, the official Git MCP server maintained by Anthropic. These flaws can be exploited through prompt injection, meaning an attacker who can influence what an AI assistant reads (a malicious README, a poisoned issue description, […]

20/1/26, 4:58 pm2 reposts6 likes

Post