Thousands of MCP Servers Found Vulnerable to File Access and Injection Attacks

Trend AI Security analyzed 9,695 MCP servers and found 5,832 with security issues (2,259 confirmed exploitable), cataloging 4,982 distinct problems including arbitrary file access, command injection, SSRF, SQL injection, denial-of-service, and widespread lack of authentication; vulnerabilities frequently co-occur and affect popular, intermediate, and low-popularity projects alike, creating a systemic AI supply-chain risk that warrants zero-trust integration, input validation, authentication, and real-time monitoring.