Why MCP Security Disclosure Is Broken - And What the Industry Needs
Security Boulevard, Thursday, November 5th, 2026
A researcher finds 38% of 514 exposed MCP servers lack authentication and says disclosure for MCP vulnerabilities is broken.
A security researcher writing on Security Boulevard reports that 195 of 514 publicly reachable MCP servers scanned (38%) expose tools with no authentication, including trading, booking and payment services.
In February 2026, seven MCP server CVEs involving unauthenticated remote code execution were published, several after maintainers ignored disclosure attempts; one became a zero-day with no patch.
The author argues traditional disclosure fails because many MCP developers are solo maintainers without security contacts, and notes most MCP traffic is reconnaissance that lists tools without calling them.
Proposed fixes include coordinated disclosure through Anthropic and the MCP registry, automated scanning at registration and prominent security guidance.