Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain
OX Security researchers found a "by design" flaw in Anthropic's Model Context Protocol SDK, present across Python, TypeScript, Java, and Rust, that allows arbitrary OS command execution through the STDIO transport interface, affecting more than 7,000...