AI coding agents are installing deprecated Model Context Protocol (MCP) servers that can expose developer machines to serious vulnerabilities. In 98% of reviewed sessions where an agent suggested or installed a deprecated server, it appeared to choose the package from its training data. The servers have no forthcoming patches, and their use can evade standard software inventory and security scans. Source
Read the full article at the source.
Comments (0)
No comments yet. Be the first to comment!