Unverified50% confidenceEventExact time
Security researchers have discovered the first malicious MCP server found being used in the wild.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/10/2026
First Seen
Valid until: 1/8/2027
Sources
Related Entities
Related Claims
UnverifiedTreating a gateway as a security substitute that makes a deployment secure once deployed is one of the most common security misconceptions during the initial launch of MCP services.71% similarUnverifiedIndependent security researcher Syed Anas Mohi Uddin discovered the same security flaw in MCP servers belonging to Google, JPMorgan Chase, and three other organizations: a tool that fetches a given URL without verifying where the address actually points.70% similarUnverifiedWhen an AI agent first attempts to access a protected MCP server, the server returns a 401 Unauthorized response and indicates the location of the authorization server in the response header.68% similarUnverifiedCritics point out that an MCP Server with file system write permissions, once exploited by malicious tools, would present an attack surface harder to audit than traditional API integrations66% similarUnverifiedA security audit conducted this year found that approximately one quarter of publicly available MCP servers have absolutely no authentication whatsoever.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/994099API
curl https://kongchang.com/api/v1/knowledge/claims/994099MCP
get_claim(id=994099)