Lock down MCP servers that can deploy
Apiiro disclosed a CVSS 10 vulnerability in argocd-mcp, the MCP server linking AI coding agents to Argo CD; exposed HTTP servers could allow unauthorized deployments.
MCP: real stories
3 items
Isolate MCP fetch tools from internal networks
A CVE describes the reference fetch MCP server fetching internal network and cloud metadata addresses. A public exploit exists; the poster says the fix was still awaiting merge.
Vet MCP packages before installing
Koi Security found an npm MCP server impersonating Postmark that, from one version on, quietly blind-copied every email it sent to an attacker-controlled address.