RCE Vulnerability Disclosed Across Multiple Official MCP SDKs
SelectionBitter6821 · reddit · 2026-08-01
Security researchers disclosed a real Remote Code Execution (RCE) vulnerability affecting several official MCP SDKs (Python, TS, Java, Rust), cataloged as AVE-2026-00060.
- Mechanism: In affected versions, tool call parameters are passed straight to the host shell without sanitization, allowing crafted parameters to execute as shell commands. This has been independently corroborated by OX Security, CSA, and Microsoft.
- Taxonomy Growth: The author's AI vulnerability taxonomy (AVE) has grown to 65 records. Each represents a distinct behavioral vulnerability class scored against the OWASP AIVSS framework and crosswalked into OWASP MCP Top 10 and MITRE ATLAS.
- Validation: An independent developer tested the taxonomy using a separate static config auditor with no shared code, finding that most overlapping results converged on identical IDs, validating the standard's robustness.
More from coding & agent
- Reflection's Beam, a 501B-parameter open MoE model with 1M context, lands on Hugging Face under Apache 2.0 — QGallouedec · 2026-10-16
- 'LLM code is sloppy' rebutted with real ffmpeg code: identical if/else branches in a top library — kingslyj · 2026-10-16
- Office-editing tool calls need file, worktree and unit: lessons from dsh-univer-office — FunDistribution6537 · 2026-10-16
- Architect MD workflow: Gemini one-shot outputs that beat Opus, via 5-lens plan critique — oikk01 · 2026-10-16
- Prove a coding agent actually ran the tests: check artifacts, not approvals — ComprehensiveShake76 · 2026-10-16
- Building an acceptance harness for AI spreadsheet edits: allowlists, recalc checks, idempotency — ukdicha-modakkk · 2026-10-16