Skip to content
AI Coding Agents Install Vulnerable Deprecated MCP Servers

AI Coding Agents Install Vulnerable Deprecated MCP Servers

First seen 3 Nov 2026, 08:16 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 18:16 UTC
  • •AI coding agents frequently install deprecated MCP servers with unpatched vulnerabilities.
  • •98% of installations are based on outdated training data, bypassing current secure options.
  • •Over 17.3 million downloads of deprecated packages highlight a significant security risk.

Research from Glow Labs reveals that AI coding agents are installing deprecated Model Context Protocol (MCP) servers, which contain high-severity vulnerabilities and will not receive security updates. In 98% of monitored sessions, agents selected these outdated servers based on their training data rather than the latest versions. Notably, one deprecated server has a remote code execution flaw that could allow an attacker to execute arbitrary commands. Despite the risks, these deprecated packages have been downloaded over 17.3 million times since July 2025, indicating widespread use. The vulnerabilities are not tracked by CVEs, making them difficult to detect with standard security measures. Current efforts to warn users about these deprecated packages are inadequate, as agents may ignore deprecation notices. No has been reported yet, but the potential for future attacks remains significant.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-07-01
Deprecated MCP packages downloaded 17.3 million times
Since July 2025, deprecated MCP packages have been downloaded over 17.3 million times, indicating widespread use despite security risks.
Feeds2.Feedburner
2026-11-03
Glow Labs report published
Glow Labs published findings on AI coding agents installing deprecated MCP servers, highlighting significant vulnerabilities.
www.glow.io

More articles in this cluster (3)

Following this threat?

Track Anthropic in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 4

Common questions

What vulnerabilities are associated with the deprecated MCP servers?
The deprecated MCP servers contain high-severity vulnerabilities, including a remote code execution flaw.
Are these vulnerabilities currently being exploited?
No active exploitation has been reported, but the potential for future attacks exists.
What should organizations do to mitigate these risks?
Organizations should avoid using deprecated MCP servers and monitor for any installations made by AI coding agents.