MCP Security Crisis: 40+ CVEs, 36% SSRF Exposure, Prompt Injection at Scale

Between January and April 2026, 40+ CVEs were filed against MCP servers. BlueRock Security scanned 7,000+ public MCP servers and found 36.7% have SSRF vulnerabilities and 41% require no authentication at all. OX Security disclosed a systemic RCE in the MCP SDK's stdio transport affecting 150M+ downloads, and Anthropic's own mcp-server-git shipped with three RCE-enabling flaws that were quietly patched. Every developer adding a third-party MCP server to their agent config is implicitly trusting code that, statistically, has a one-in-three chance of SSRF exposure and nearly even odds of requiring no auth at all. This tool lets a developer run a single command against any public MCP server's GitHub repo URL or running endpoint and get a line-level trust report covering SSRF patterns in tool parameter handling, auth posture on tool routes, prompt injection strings in tool descriptions, and unsanitized shell calls in stdio transport handlers, before the server ever touches their agent config.