AI coding agents keep installing unpatched MCP servers

AI coding agents are installing deprecated Model Context Protocol (MCP) servers that can expose developer machines to serious vulnerabilities. In 98% of reviewed sessions where an agent suggested or installed a deprecated server, it appeared to choose the package from its training data. The servers have no forthcoming patches, and their use can evade standard software inventory and security scans. Source

Läs hela artikeln hos källan.