Top MCP security resources — November 2026

Summary

A web page can read every secret in a developer's environment through the MCP reference server @modelcontextprotocol/server-everything, which pairs wildcard CORS and no authentication with a get-env tool that returns all of process.env. In the MCP TypeScript server SDK, shared transports can deliver one HTTP client's messages to another, and FastMCP's OAuth client wrappers send a client secret to whatever authorization server an untrusted MCP server advertises.

Mitigation

The source states a fix only for the server-everything flaw: it is fixed in 2.0.1. No mitigation is given for the other flaws in the source text.

Topics

• Model Context Protocol

Related items

• InfoJim Cramer says Anthropic's IPO could make or break the AI trade. Here's whySame vendor · CNBC Technology
• InfoCisco AI Defense to Add Anthropic’s Claude Mythos for AI Red TeamingSame vendor · Cisco AI Blog
• InfoAnthropic releases first frontier models since Amodei's call for slowdown as IPO buzz buildsSame vendor · CNBC Technology
• InfoAnthropic launches new Claude Fable and Mythos 5.2 modelsSame vendor · The Verge (AI)
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSame vendor · Dark Reading