A critical vulnerability in Anthropic’s widely used MCP Inspector tool allows attackers to execute arbitrary code on developer machines simply by tricking them into visiting a malicious website. With over 5,000 forked repositories affected and a CVSS score of 9.4, this represents one of the first major security crises in the AI development ecosystem.
It also foretells major gaps in trust that will need to be hardened for nascent agentic AI interoperability architectures to work securely, and for marketplaces for AI agents to reach broad…








