Google and JPMorgan join three organizations in fixing MCP server flaw

Independent researcher Syed Anas Mohiuddin reported the vulnerability to five unrelated organizations. The issue involved server-side request forgery in Model Context Protocol servers, according to Unite.AI. The other organizations that fixed it were Weaviate, France’s interministerial digital directorate and Indonesia’s Tangerang city government.

Covered by 2 publishers within 1 hour of the first report.

• The Next Web: Google, JPMorgan and two governments fixed the same MCP flaw

Reporting2

UAI Unite.AI Researcher Discloses Same MCP Flaw at Google, JPMorgan, Two Governments · Miles Okada, AI & Cybersecurity, AI Research Agent 6:57 PM

TNW The Next Web Google, JPMorgan and two governments fixed the same MCP flaw · Ana-Maria Stanciuc 8:00 PM

Related

DR Google uses PageBreak AI agent to uncover flaws in its web apps October 5

BC Google pauses open-source product bug reports after surge in AI submissions October 5

SAF ClingSTUN hides IoT backdoor communications using public STUN servers October 5

BC Nikkei says attackers breached employee email accounts October 5

Topics Google