Ox-Security

Ox Security disclosed a critical architectural flaw in MCP’s STDIO transport today: unsanitized user-supplied commands are executed as subprocesses before any validation, enabling remote code execution by design. Anthropic declined to patch the architecture. If you’re running MCP-based tooling — LangFlow, LiteLLM, Windsurf, Cursor, Claude Code, OpenClaw — this guide gives you concrete steps to reduce your exposure right now. Scope: These mitigations address the MCP STDIO RCE flaw (CVE-2026-30615, CVE-2026-30623, CVE-2026-30624 and related). They reduce risk; they do not eliminate it at the architectural level. Monitor for upstream patches. ...

This is the kind of security disclosure that deserves your full attention — not because it’s theoretical, but because it’s architectural, unpatched, and affecting software you almost certainly use right now. Ox Security published what they’re calling “the Mother of All AI Supply Chains” on April 16: a systemic flaw in Anthropic’s Model Context Protocol (MCP) that enables remote code execution by design, affecting an estimated 200,000 servers and tools with over 150 million downloads. ...