October 2026: worst month yet for MCP security.
Langflow RCE (CVSS 9.9)
SSRF in the official MCP fetch server
Unauthenticated debugger on 0.0.0.0
Same SSRF found at Google, JPMorgan, 5 unpatched US federal servers
97M installs. No normative security requirements in the spec. 72.8% attack success rate in benchmarks.
Full breakdown: [https://blog.relayshield.net/mcp-server-attack-surface]