{"uuid": "6d1e2f74-8fb0-4f2a-9457-8fee42d56ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6514", "type": "seen", "source": "https://t.me/hacking_Attack/181311", "content": "MCP servers are the new attack surface \u2013 so I mapped it and built a scanner\nhttps://www.reddit.com/r/Pentesting/comments/1rqegnr/mcp_servers_are_the_new_attack_surface_so_i/\n\nOver the past few months I've been researching MCP (Model Context Protocol) security \u2014 the protocol that connects AI agents like Claude and Cursor to real-world tools. What I found was a pretty under-audited attack surface with a growing CVE list and no dedicated tooling to assess it. Some context on why this matters: Tool poisoning attacks (hidden Unicode, prompt injection in tool descriptions) have shown >72% success rates in controlled research. CVE-2025-6514 gave attackers full OS command execution via mcp-remote, affecting an estimated ~500k developers. Shodan-style scans have found 492+ unauthenticated MCP servers publicly exposed. Credential leaks are rampant \u2014 API keys embedded directly in tool metadata. The problem was there was no purpose-built scanner for any of this. Existing tools don't understand MCP's transport layer or trust model. So I spent time building one \u2014 MCPScan, an offensive auditor that works across stdio, HTTP, and SSE transports. It covers 8 check categories with finding IDs mapped to CVEs and CVSS scores. The one I find most interesting in practice is the overprivileged capability detection \u2014 a lot of MCP servers are handing out shell + filesystem access in the same tool with zero path restrictions. Quickest way to see what's installed on your own machine: bash git clone https://github.com/sahiloj/MCPScan npm install && npm run build && npm link mcpscan scan --all-configs  Outputs terminal, JSON, or SARIF (drops straight into GitHub Code Scanning). Would genuinely appreciate feedback on the threat model or any check categories I've missed. Still v0.1.0 \u2014 there's a lot more surface to cover. GitHub: https://github.com/sahiloj/MCPScan    submitted by    /u/Remarkable_Ball47  (https://www.reddit.com/user/Remarkable_Ball47) \n [link] (https://www.reddit.com/r/Pentesting/comments/1rqegnr/mcp_servers_are_the_new_attack_surface_so_i/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1rqegnr/mcp_servers_are_the_new_attack_surface_so_i/)", "creation_timestamp": "2026-09-02T01:00:29.196992Z"}