Never let a signup go cold again.
Turn emails into revenue with Brew. No credit card, free credits to try.
Turn emails into revenue with Brew. No credit card, free credits to try.
ox.security · newsletter
Explore this email design and adapt it to your own brand. Review the copy, links, and offer before sending.
Critical, Systemic Vulnerability at the Core of the MCP (1)
Hey there
The OX Security Research team has uncovered a systemic AI supply chain vulnerability in Anthropic’s MCP.
This "RCE-by-Design" flaw is an architectural choice that creates a critical security risk for any organization building with AI agents, exposing 150M+ downloads and 200K servers to complete takeover.
Read Now
Report Findings:
Systemic Exposure: 150M+ downloads across Python, TypeScript, Java, and Rust SDKs.
Impact: Remote Command Execution (RCE) which exposes unauthorized access to sensitive data and API keys.
Vulnerable Frameworks: Impacting industry staples like LangChain, LiteLLM, and IBM's LangFlow.
Verified Vectors: Zero-Click Prompt Injection in Windsurf, and One & Two-Click Prompt Injection in Cursor, Claude Code, Gemini-CLI.
It is time to prioritize "Secure by Design" architecture across the entire AI ecosystem.
P.S. We will be breaking this research down on Thursday, April 23rd during a live session. Watch your inbox for more details 👀.
- Team OX
X
YouTube
OX Security, 488 Madison Ave., New York, New York 10022, USA
Manage preferences
Browse more email designs