{"data":{"id":"fd53a965-22ee-4afd-82a5-2c8322abbf9f","title":"CVE-2025-34072: A data exfiltration vulnerability exists in Anthropic’s deprecated Slack Model Context Protocol (MCP) Server via…","summary":"CVE-2025-34072 is a data exfiltration flaw in Anthropic's deprecated Slack Model Context Protocol (MCP) Server, reached through automatic link unfurling. When an AI agent using the server processes untrusted data, it can be manipulated into posting messages with attacker-crafted hyperlinks that embed sensitive data. Slack's link preview bots (Slack-LinkExpanding, Slackbot, Slack-ImgProxy) then request the attacker-controlled URL, leaking private data with no user interaction.","solution":"N/A -- no mitigation discussed in source.","labels":["security","privacy"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-34072","publishedAt":"2025-07-02T18:15:24.817Z","cveId":"CVE-2025-34072","cweIds":["CWE-20","CWE-200"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","pii_leakage"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Anthropic","Slack Model Context Protocol (MCP) Server","Slack"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Anthropic Slack MCP Server data exfiltration via automatic link unfurling","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0043,"epssCheckedAt":"2026-11-04T06:10:14.827Z","kevDateAdded":null,"advisoryAliases":["GHSA-gmx5-crwh-6vxg"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:31.650Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-116"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}