https://oddguan.com/tags/mcp/Recent content in MCP on Aonan Guanhttps://oddguan.com/avatar.webphttps://oddguan.com/avatar.webpHugo -- 0.147.7en-usTue, 28 Jul 2026 00:00:00 +0000https://oddguan.com/blog/mcp-2026-07-28-agentgateway-session-authorization-bypass/Tue, 28 Jul 2026 00:00:00 +0000https://oddguan.com/blog/mcp-2026-07-28-agentgateway-session-authorization-bypass/Enterprise MCP gateways centralize authentication, routing, and tool authorization. Agentgateway versions before v1.4.0 let a session from one route reuse a sensitive backend under another route's permissive policy. Agentgateway v1.4.0 fixes the issue. MCP 2026-07-28 removes protocol sessions from the core.https://oddguan.com/blog/anthropic-mcp-server-git-add-path-traversal-credential-exfiltration-capability-laundering-cve-2026-27735/Sat, 28 Feb 2026 00:00:00 +0000https://oddguan.com/blog/anthropic-mcp-server-git-add-path-traversal-credential-exfiltration-capability-laundering-cve-2026-27735/CVE-2026-27735: MCP Git Server git_add path traversal vulnerability enables credential exfiltration via GitPython's missing boundary validation. A single git_add call reads SSH keys, kubeconfig, and AWS credentials into Git history — invisible in the working directory. Third case of capability laundering in MCP ecosystems.https://oddguan.com/blog/mcp-bundle-security-zip-slip-overwrite-for-mcp-client/Sat, 17 Jan 2026 00:00:00 +0000https://oddguan.com/blog/mcp-bundle-security-zip-slip-overwrite-for-mcp-client/MCPB bundles are ZIP files. MCP developers implementing custom extraction must handle ZIP security risks like path traversal, silent overwrite, and symlink attacks.https://oddguan.com/blog/anthropic-mcp-server-git-credential-exfiltration-capability-laundering-cve-2025-68143/Sun, 28 Dec 2025 00:00:00 +0000https://oddguan.com/blog/anthropic-mcp-server-git-credential-exfiltration-capability-laundering-cve-2025-68143/CVE-2025-68143: Anthropic Git MCP Server's git_init bypasses CWD boundaries, enabling attackers to create repositories in sensitive directories and exfiltrate credentials via routine Git tool calls.https://oddguan.com/blog/anthropic-memory-mcp-server-terminal-hijacking-capability-laundering/Sat, 27 Dec 2025 00:00:00 +0000https://oddguan.com/blog/anthropic-memory-mcp-server-terminal-hijacking-capability-laundering/A schema validation flaw in Anthropic's Memory MCP Server enables VS Code terminal profile hijacking through capability laundering. Despite being patched, Anthropic declined to assign a CVE and closed the report as 'informative'.