Command Injection

Anthropic Stands By MCP STDIO Design That Researchers Say Enables Command Execution

Security teams warn the default launch path can run local commands even when server startup fails, creating broad supply‑chain risk across popular MCP SDKs.