Every verifiable credit, dated

Syed Anas Mohiuddin · AI security researcher · each item links to the independent record, not to this site

CVEs & security advisories

CVE-2026-14540 — SSRF in Google's MCP Toolbox for Databases

Published 2026-07-31 · CNA: Google · CVSS v4.0 8.0 (High)

Credited by name as finder. CVE record · NVD · writeup
HackerOne #3968010 — credential leak in Weaviate's Google-backed modules

Confirmed and fixed, credited in Weaviate's Security Hall of Fame

Unvalidated apiEndpoint let an attacker-chosen host receive the operator's Google API key or OAuth token. Fixed in weaviate/weaviate PR #12961.
GHSA-qw2f-q5g4-38wg — auth bypass in Red Hat's rosa-mcp-server

Confirmed by Red Hat

SSE authentication bypass via OCM_OFFLINE_TOKEN fallback. Advisory.
Full Disclosure — SSRF in Anthropic's mcp-server-fetch and Microsoft's playwright-mcp

Published on the Full Disclosure mailing list, 2026-05

CVSS 7.5 SSRF found using mcp-safeguard. Full post.

MCP Security Considerations — IETF Internet-Draft

draft-mohiuddin-mcp-security-considerations

IETF Datatracker
VisQuant — a synthetic benchmark for object counting and spatial reasoning

DOI: 10.57967/hf/8943

Vision-language model benchmark dataset. Hugging Face

mcp-safeguard

Static-analysis security scanner for MCP servers, ~150 rules across 7 categories

PyPI · GitHub

Four vendors, one bad assumption: SSRF in MCP servers

Read on this site
The field two security patches missed: Weaviate's apiEndpoint credential leak

Read on this site
I could not read every MCP server by hand, so I built something that could

Read on this site