model-context-protocol

AI Code Gets CVEs Now.

John Z Black Mar 29, 2026

AI Security #ai-security #vibe-coding #ncsc #mcp #model-context-protocol #prompt-injection #rsac #developer-security #ai-code

The UK's NCSC called AI-generated code an 'intolerable risk,' researchers found all seven major MCP clients vulnerable to attack, and 35 CVEs in March alone traced directly back to AI-written code.