03:29
2026-09-29
dev.to
ai-agents
Four vendors, one bad assumption: SSRF in MCP servers
A security researcher found the same server-side request forgery (SSRF) flaw in MCP servers shipped by Google, Anthropic, Microsoft, and Weaviate, all stemming from the shared assumption that a model-…