How an Unauthenticated MCP Server Led to SSRF, LFI, and AWS Credential Theft

# Executive summary The report describes a critical attack surface in Model Context Protocol (MCP) deployments where an unauthenticated audio proxy tool enabled SSRF to AWS IMDS and file:// LFI, allowing exfiltration of IAM credentials and plaintext database secrets, with broader implications from supply-chain backdoors and active APT campaigns targeting MCP infrastructure.