MCP Is Creating Major Governance Gaps, Researchers Warn

Ox Security and other researchers warn that Model Context Protocol (MCP) servers create a governance and security gap: many publicly accessible MCP servers resolve outside controlled regions, some hostnames are unregistered and could be impersonated, prompt-injection plus an "always-allow" permission model can enable silent data exfiltration, and an architectural flaw in Anthropic's MCP SDKs may allow arbitrary command execution across many projects and instances—potentially exposing tens or hundreds of thousands of systems if exploited.