Unverified50% confidenceFactExact time
These MCP server vulnerabilities were discovered and reported single-handedly by independent security researcher Syed Anas Mohuddin.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/14/2026
First Seen
Valid until: 10/28/2026
Sources
Related Entities
Related Claims
UnverifiedSecurity researchers have discovered the first malicious MCP server found being used in the wild.75% similarUnverifiedIndependent security researcher Syed Anas Mohi Uddin discovered the same security flaw in MCP servers belonging to Google, JPMorgan Chase, and three other organizations: a tool that fetches a given URL without verifying where the address actually points.73% similarUnverifiedDisclosed MCP vulnerabilities include: argocd-mcp shipped with no authentication at all, Rill's OAuth flow allowed attackers to skip the user consent step, and prompt injection existed in the tool descriptions of multiple MCP servers.69% similarUnverifiedA single compromised MCP server can execute prompt injection, credential exfiltration, delivery of phishing toolkit fingerprints, PII leakage, token theft via OAuth, and SSRF attacks.67% similarUnverifiedCritics point out that an MCP Server with file system write permissions, once exploited by malicious tools, would present an attack surface harder to audit than traditional API integrations67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1029722API
curl https://kongchang.com/api/v1/knowledge/claims/1029722MCP
get_claim(id=1029722)