AINewsnow

42 CVEs mentioning MCP published in 7 days. 3 of them mention injection

This story is from 2026-09-01. It is preserved in the archive; the latest stories are on the live feed.

I pulled every CVE mentioning MCP published between 2026-08-25 and 2026-09-01 straight from the NVD API. 42 results. Then I read the descriptions and classified them. Nine are CVSS 9.0 or above. Two are 10.0. Three mention prompt injection. Here is what the rest are: auth optional or absent 8 Host…

Read the full story at r/LocalLLM ↗

Timeline · 1 report

  1. 2026-09-01 07:59 · r/LocalLLM
    42 CVEs mentioning MCP published in 7 days. 3 of them mention injection

More stories

  1. Trump announces a new 'AI Force,' but says he will not 'stifle' AI — Business Insider AI
  2. Anthropic, OpenAI, SpaceXAI, Google sued over call to ‘pace’ AI development — Politico Technology
  3. Google's Gemini AI hacks three other companies during security test — Sky News Technology
  4. Gemini Hacked Three Companies in First Known Breakout by Google’s AI — Wall Street Journal Technology
  5. OpenAI reveals cases of ‘concerning’ AI behaviour as it announces new disclosure system — The Guardian AI
  6. AI's role in building AI surging? Anthropic says Claude now leads 26% of its R&D — Mint AI
  7. Alibaba ships Qwen3.8-Omni-Flash to watch, listen and call tools — r/LocalLLM
  8. Microsoft exec called AI scraping the “largest theft of labor in human history” — Ars Technica AI

Get the daily brief of stories like this at 6:30 every morning →