Tag

MCP

3 articles tagged MCP.

Diagram of a LiteLLM internal user submitting a forged admin credential as key metadata, the proxy encrypting it with the shared salt key, and the returned ciphertext being replayed as an admin bearer token that reaches the MCP stdio endpoint

AI SecurityOct 30, 2026

LiteLLM CVE-2026-114612: how one shared key turned an internal user into proxy admin

LiteLLM used one encryption key both to seal stored secrets and to mint login tokens, so an internal user could get the proxy to encrypt a forged admin credential for them. Here is who is exposed, which releases fix it, and the follow-up checks worth doing.

6 min read

Diagram of a malicious MCP server returning a crafted authorization_endpoint that an MCP client passes into a PowerShell command string instead of opening it as a validated argument

AI SecurityOct 27, 2026

When MCP sign-in runs code: authorization URL injection in opencode and mcp-remote

During MCP sign-in, the server tells your client which URL to open. In opencode and mcp-remote, a crafted URL was enough to run commands on the developer's machine.

6 min read

Diagram of an MCP client connecting to three servers, with a review gate that compares each server's tool definitions against a pinned hash before they reach the model

AI SecurityOct 17, 2026

Vetting third-party MCP servers: tool poisoning, rug pulls, and a review checklist

Connecting an MCP server hands its author a voice in your agent's context and, often, code execution on your machine. Here is how to review one before you connect it and keep it honest afterwards.

7 min read