CRITICAL: April 2026 STDIO RCE

The STDIO RCE Vulnerability

In April 2026, a critical Remote Code Execution (RCE) vulnerability was discovered in several popular MCP Host applications that rely on the stdio transport layer.

How the Exploit Works

The vulnerability stems from how standard input/output handles unescaped shell commands when launching child processes. If an attacker tricks a user into installing a malicious MCP server (e.g., via a typosquatted npm package like mcp-server-gihub instead of github), the server can escape the stdio stream and execute arbitrary bash/powershell commands on the host machine.

Mitigation Strategies

• Sandboxing: Never run untrusted MCP servers directly on your host OS. Always run them inside Docker containers or isolated VMs.
• Transport Shift: For high-risk servers, migrate from stdio to Streamable HTTP (SSE), which enforces a strict network boundary and prevents process-level escapes.
• Signature Verification: Use the newly introduced mcp-verify tool to check the cryptographic signatures of MCP servers before installation.