1 matches found
CVE-2025-34072: Exposure of Sensitive Information to an Unauthorized Actor
A data exfiltration vulnerability exists in Anthropic’s deprecated Slack Model Context Protocol MCP Server via automatic link unfurling. When an AI agent using the Slack MCP Server processes untrusted data, it can be manipulated to generate messages containing attacker-crafted hyperlinks embeddin...
9.3CVSS5.8AI score0.0043EPSS
SaveExploits0References1
20