Attacks/MCP Exploitation/MCP-010

CRITICALCWE-200

MCP-010 MCP Env Variable Extraction

MCP Exploitation: Attempts to exploit MCP tool call parameters (path traversal, command injection, SSRF)

Description

Attempts to extract environment variables via command execution

Remediation

Block env/printenv commands. Sanitize command output. Use secret management.

Severity

CRITICAL

OASB Control

CWE

CWE-200

PreviousMCP-009 MCP Write to Sensitive Path NextA2A-001 A2A Agent Discovery