Critical Flowise Flaw Enables Remote Command Execution via MCP Adapters

Gbhackers •Divya • April 17, 2026

OX Security researchers have uncovered a critical, systemic vulnerability built directly into the architecture of Anthropic’s Model Context Protocol (MCP). As the industry standard for AI agent communication, this foundational flaw exposes systems to Arbitrary Command Execution (RCE). Attackers who exploit this vulnerability can seize complete control of affected MCP implementations, gaining direct access to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in MCP Protocol Exposes 200,000 AI Servers to Remote Code Execution A report by OX Security has identified a critical vulnerability in the Model Context Protocol (MCP) developed by Anthropic, potentially exposing over 200,000 AI servers to remote code execution. The flaw lies in the STDIO interface of the MCP SDK, which executes commands without proper validation, even if the server fails to start. This design decision affects all 11 programming languages supported by MCP, impacting over 150 million downloads and thousands of public servers. Researchers have demonstrated that attackers can exploit this vulnerability to gain complete control over affected systems. Despite multiple disclosures to Anthropic, the company maintains that the behavior is by design and has not implemented any architectural changes. The vulnerability has been assigned a CVE number, and OX Security has documented over 10 high or critical-severity CVEs related to this issue. The situation poses a significant risk to developers and organizations relying on MCP for AI applications. 11 sources 70

Extracted Entities

Critical Flowise Flaw Enables Remote Command Execution via MCP Adapters

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)