Product
Unauthenticated Model Context Protocol (MCP) servers, particularly those running protocol version 2024-11-05, are widely exposed across cloud environments, enabling significant security risks by allowing attackers to bypass authentication, gain initial access, execute arbitrary commands on backend systems, obtain sensitive cloud credentials (including temporary ones via Server-Side Request Forgery against cloud metadata endpoints), discover internal systems and data, and collect/exfiltrate sensitive information like PII, business records, and security findings.