Four vendors, one bad assumption: SSRF in MCP servers
A security researcher found the same server-side request forgery (SSRF) flaw in MCP servers shipped by Google, Anthropic, Microsoft, and Weaviate, all stemming from the shared assumption that a model-…