Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:atomic-Agents:atomic-Agents-Stack:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Arbitrary Code Execution in atomic-agents-stack via MCP Registry Injection

The atomic-agents-stack library before 1.1.0 allows man-in-the-middle attackers to inject malicious subprocess commands by exploiting cleartext HTTP communication in the MCP server-registry backend.

atomic-agents-stack
2t 1c