Monday, April 27, 2026 · 3 of 5

1. MCP design flaw enables RCE across the AI agent ecosystem

   Architectural bug in all Anthropic MCP SDKs exposes ~200,000 servers; Cursor, Claude Code, VS Code, Windsurf all affected. Anthropic called it "expected behavior."

   Apr 20