AI coding agents install unpatched deprecated MCP servers
Glow Labs research found AI agents installing deprecated MCP servers in 98% of sessions, with four high-severity vulnerabilities including RCE, downloaded over 17.3 million times, no patches or exploitation seen.