Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/02 12:00 a.m.•7 views

CVE-2025-34072: Exposure of Sensitive Information to an Unauthorized Actor

A data exfiltration vulnerability exists in Anthropic’s deprecated Slack Model Context Protocol MCP Server via automatic link unfurling. When an AI agent using the Slack MCP Server processes untrusted data, it can be manipulated to generate messages containing attacker-crafted hyperlinks embeddin...

9.3CVSS5.8AI score0.0043EPSS
SaveExploits0References1
Rows per page
Query Builder