All technologies

Model Context Protocol

1 painsavg 10.0/10
security 1

Security Vulnerabilities in Repository Configuration and MCP

10

Three CVEs discovered: malicious code in documents can exfiltrate private data; Model Context Protocol (MCP) allows repository config to override user approval safeguards enabling remote code execution; repository-controlled settings redirect API traffic to attacker servers to steal API keys.

securityClaude CodeModel Context Protocol