mcp-remote

Mentions · 7d1
Mentions · 30d1
All mentions2
First seenAug 17, 2026
Last mentioned11h ago

Timeline

2 articles · newest first

Corelight: MCP servers can pull unreviewed packages with admin access

On one lab workstation, 19 rebuilds of one pinned MCP release produced 15 environments as transitive PyPI packages drifted.

GBHackersupdated 16:07 UTC · 4h agofirst 09:29 UTC · 11h agoAI safety & security 2 sources

How MCP Servers Can Expose Enterprise Secrets

MCP servers holding AI agent credentials risk secret exposure via plaintext configs, credential sprawl, prompt injection, and over-permissioning; mitigations include centralization and least privilege.

The Hacker NewsAug 17, 11:58 UTC · Aug 17, 2026AI safety & securityCVE-2025-651410 · 5 reads

Related CVEs

by mentions

CVE-2025-651478%9.6
Critical OS Command Injection in mcp-remote Enables RCE via Untrusted MCP Servers
published Jul 9, 2025mcp-remote project (npm package) mcp-remote

Appears with

Model Context Protocolproduct · 2
Corelightorganization · 1
uvxproduct · 1
Anthropicvendor · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned 11h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.