AgentSeal MCP server mass scan — 66% of 1,808 servers have security findings
Date: 2025
Affected: MCP server ecosystem — 1,808 servers scanned, 66% vulnerable
Attack vector: command-injection
Category: research-demonstrated
Severity: Critical

Scan of 1,808 MCP servers: 66% had at least one security finding. 43% had shell/command injection, 20% tooling infrastructure flaws, 13% authentication bypasses, 10% path traversal. Critical findings demonstrated ability to execute arbitrary code with no user interaction.

Impact: Systemic risk to AI agent infrastructure; arbitrary code execution at scale

Mitigations:
Automated vulnerability scanning for MCP servers
Community security baseline standards
MCP server security certification program

Architectural layers (MAESTRO):
label: Agent Ecosystem
notes: Systemic insecurity across MCP server ecosystem
role: origin
label: Agent Frameworks
notes: 66% of servers vulnerable to code execution or data theft
role: impact