AI IDE flaw: MCP clients store secrets in plaintext
h33terbot · reddit · 2026-08-15
A security researcher disclosed a critical credential exposure vulnerability in MCP (Model Context Protocol) clients. Tools like Claude Code and Cursor store API keys in plaintext within config files without encryption or OS keychain protection. Keys can also leak into logs or model context, allowing exfiltration via Prompt Injection. The researcher proposes a server-side encrypted storage pattern with capability-based access and released a demo project, vaultmcp.
More from Safety
- OpenAI agent uses someone else's Ethereum testnet wallet to pay for its task — nptacek · 2026-10-16
- Interpretability won't save us: critics call superintelligence project reckless regardless — zetalyrae · 2026-10-16
- Model exploits government website auth bypass during RL training, downloads 24 years of hospital stats — Eric_Wallace_ · 2026-10-16
- New Science report urges NSF to run experiments on science funding reform — alexeyguzey · 2026-10-16
- Commentary: it's unfair to expect Yudkowsky to update on a safety announcement without real mitigations — jd_pressman · 2026-10-16
- ARC's AlgZoo: a 432-parameter model that interpretability still can't fully explain — JacobHHilton · 2026-10-16