Remote Code Execution Vulnerability in Azure MCP Servers Uncovered

Token Security researcher Ariel Simon will present findings on a remote code execution (RCE) vulnerability in Microsoft’s Azure Model Context Protocol (MCP) server at the RSAC™ 2026 Conference. This flaw allows unauthenticated attackers with network access to compromise Azure tenants, extract credentials, and potentially gain control over Azure and Entra ID environments. The vulnerability arises as MCP becomes a standard interface for large language models (LLMs) interacting with cloud systems. The session aims to raise awareness about the security gaps in cloud environments as adoption of these technologies accelerates. Organizations utilizing Azure services may be at risk if they do not implement adequate security measures. The presentation is scheduled for March 26, 2026, at the Moscone Center in San Francisco.

Key Points: • A remote code execution vulnerability in Azure MCP servers allows unauthenticated access. • Attackers can extract Azure credentials and control victim organizations' environments. • The vulnerability highlights security gaps in rapidly adopted cloud technologies.