
- Ox researchers warn Anthropic’s Model Context Protocol has systemic RCE flaw
- Vulnerability baked into MCP SDKs across Python, TypeScript, Java, Rust
- 200,000+ instances exposed; Anthropic says behavior is “expected”
Security researchers Ox have claimed Anthropic’s Model Context Protocol (MCP) contains a “critical, systemic vulnerability” which puts hundreds of thousands of instances at risk of remote code execution (RCE).