Researcher Discloses Same MCP Flaw at Google, JPMorgan, Two Governments

Security researcher Syed Anas Mohiuddin revealed that a server-side request forgery (SSRF) vulnerability in Model Context Protocol (MCP) servers was independently found and fixed by Google, JPMorgan Chase, Weaviate, and two government bodies. The flaw stems from unsafe handling of agent-supplied URLs, allowing malicious redirection of server requests, with Google’s MCP Toolbox receiving a high-severity CVE in mid-2026. Despite fixes, several US federal MCP servers remain vulnerable.