// Hacker Noon · 5 May 2026

Security Audit Finds RCE Risks in 6.2% of MCP Servers

We audited over 2,000 open-source Model Context Protocol (MCP) servers and found that 6.2% contain critical architectural flaws. Developers are exposing dangerous tools like subprocess.run and raw SQL executors directly to LLMs without Human-in-the-Loop (HitL) confirmations. This turns a simple prom...

Hacker Noon

@hacker-noon · Arsenii Brazhnyk

hackernoon.com

Hacker Noon@hacker-noon