200,000 MCP servers expose a command execution flaw that Anthropic calls a feature

A security audit by Ox Security identified a command execution vulnerability in MCP (Model Context Protocol) stdio transport affecting approximately 200,000 deployed servers. The flaw allows agents to potentially execute commands through protocol manipulation. Anthropic characterizes the issue as an inherent aspect of MCP's design rather than a vulnerability requiring fixes.