Threat
Your MCP Server Is the New Attack Surface (and the Bugs Are Old Ones)
First reported · Discovered medium.com
Page published
Earliest dated coverage: 20 Oct 2026 · First observed: 3 Nov 2026 · Latest dated coverage: 20 Oct 2026
Coverage timeline
Single-source analysis — one report is available.
Why it matters
Vulnerable MCP tools can expose files, credentials, and server-reachable resources through the infrastructure AI agents use to take actions.
Three reported MCP-server vulnerabilities expose server-accessible files in Atlassian MCP (CVE-2026-73498), disclose plaintext cluster tokens in ArcadeDB MCP (CVE-2026-67357), and permit SSRF in facebook-ads-mcp-server (CVE-2026-19956). The described causes are unvalidated file paths, sensitive settings output, and unrestricted pagination URLs.