Anthropic MCP Design Flaw Exposes AI Systems to Remote Attacks

🛑 A design flaw in Anthropic’s MCP allows remote command execution on AI systems.

150M+ downloads affected as unsafe STDIO defaults expose 7,000+ services, including tools like LangChain and Flowise.

Anthropic calls the behavior “expected,” leaving the risk across the AI… pic.twitter.com/838mDo6nKG

— The Hacker News (@TheHackersNews) April 20, 2026