{"data":{"id":"3c024210-50d4-4b57-95cd-e7da2c65597a","title":"How MCP Servers Can Expose Enterprise Secrets","summary":"MCP servers (Model Context Protocol, a system that lets AI agents connect to enterprise tools and data) can expose secrets like API keys and credentials through plaintext configuration files, scattered copies across multiple systems, prompt injection (tricking an AI by hiding instructions in documents it reads), and over-permissioning (giving servers more access than they need). This creates a major security risk because MCP servers hold the keys to enterprise systems, and many organizations deploy them without proper security protections.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://thehackernews.com/2026/08/how-mcp-servers-can-expose-enterprise.html","publishedAt":"2026-08-17T11:58:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Anthropic","Model Context Protocol (MCP)"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-17T11:58:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}