MCP Supply Chain Advisory: RCE Vulnerabilities Across the AI Ecosystem

OX Security researchers identified a systemic command injection vulnerability in Anthropic's Model Context Protocol SDK that propagated across the AI ecosystem, the firm said. The advisory details four exploit families stemming from one root cause, affecting multiple platforms including LangFlow, GPT Researcher, LiteLLM, Agent Zero, LangBot, Fay Digital Human Framework and two undisclosed products. Researchers said the vulnerabilities allow unauthenticated or authenticated remote command execution via MCP STDIO configuration interfaces. LangFlow contains an unauthenticated remote command execution flaw in its MCP adapter configuration functionality allowing attackers to obtain an