agent-audit-kit / disclosures

Public Disclosures

Numbered, dated entries documenting real agent-security findings and the agent-audit-kit rules that detect them. Auto-feed at feed.xml. Disclosure cadence: one per month, more when the world hands us one.

1 publishedLatest 2026-05-23RSS at feed.xml

#001
Critical
AAK-MCP-001
CVE-2026-30623
2026-05-23
MCP STDIO Config Injection
Unsanitised MCP STDIO config is RCE-by-design across the MCP ecosystem. Any framework that ingests user-controlled MCP server definitions and spawns STDIO subprocesses without sandbox enforcement gives an attacker arbitrary shell execution on the host. agent-audit-kit's AAK-MCP-001 rule family detects this class at static-analysis time.
Affected: LangChain ≤ 0.3.0, LangFlow ≤ 1.5.x, LettaAI, +2 moreRead disclosure

Public Disclosures

MCP STDIO Config Injection