The risk hiding behind exposed MCP servers

Wiz Research identified widespread exposure of unauthenticated Model Context Protocol (MCP) servers across cloud environments, including systems belonging to Fortune 500 companies. These exposed servers can leak sensitive data, enable unauthorized write and delete operations, and in some cases allow code execution or access to cloud credentials. The majority still use the original 2024-11-05 protocol version without authentication, making them easy targets for reconnaissance and exploitation. Attackers can leverage the self-describing nature of MCP to automatically discover and abuse capabilities without needing prior knowledge of the API.

AI-extracted · verify before operational use