{"vulnerability": "CVE-2026-3062", "sightings": [{"uuid": "9b1cff13-9044-4911-b8d5-d8cf25bf2476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3062", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mggpedt7l22y", "content": "", "creation_timestamp": "2026-03-07T01:45:57.520372Z"}, {"uuid": "ccdea39a-9417-4acc-8c85-f209c2edd133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3062", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mfnqgtjn7s26", "content": "", "creation_timestamp": "2026-02-25T03:28:43.587115Z"}, {"uuid": "6f3c06a4-2fa6-4f01-97e6-26c852224059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3062", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfmfim3u7i2w", "content": "", "creation_timestamp": "2026-02-24T14:40:08.324358Z"}, {"uuid": "b1c4ec59-be00-4fa0-8dd9-aac3bdb1ce48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3062", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfovdhbi7c2l", "content": "", "creation_timestamp": "2026-02-25T14:28:59.410683Z"}, {"uuid": "5ffc4b75-7c3e-4f6a-96dc-f498652361c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3062", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116124057999218618", "content": "", "creation_timestamp": "2026-02-24T05:55:17.194546Z"}, {"uuid": "4632f253-6262-4dba-b37e-36e5d90d2106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3062", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mftv7prkil2k", "content": "", "creation_timestamp": "2026-02-27T14:10:08.216504Z"}, {"uuid": "c736c516-21eb-48ad-a443-fcd948e51780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30623", "type": "seen", "source": "https://gist.github.com/Correctover/baade27067eb2159f0fecb0aa30e3388", "content": "# SentinelOne + Prompt Security: The Missing Runtime Verification Layer\n\n**Date**: 2026-08-04 | **Author**: Guigui Wang, Correctover\n\n---\n\nSentinelOne acquired Prompt Security for $250M to add MCP content inspection (prompt injection detection, DLP, data governance). But there's a gap: **no pre-execution tool parameter verification**.\n\n## What Prompt Security Does vs. What's Missing\n\n**Does**: Content scanning of tool responses \u2014 PII detection, prompt injection in outputs, DLP  \n**Doesn't**: Schema validation of arguments before execution, SSRF detection in URLs before requests, command injection detection before shell execution, integrity checking for schema drift\n\nThe security boundary is after the tool executes. By then, SSRF has reached the metadata service, command injection has executed, path traversal has accessed files.\n\n## The Complete Stack\n\n```\nAgent \u2192 [CCS: Pre-execution, ~7.5\u03bcs] \u2192 [Prompt Security: Content inspection] \u2192 MCP Server\n         Blocks malformed calls          Detects data leakage in responses\n```\n\nCCS (7-dim runtime verification) + Prompt Security (content inspection) = complete coverage.\n\n## Performance\n\n| Layer | Latency | What it catches |\n|-------|---------|----------------|\n| CCS pre-execution | ~7.5\u03bcs (in-process) | Schema violations, SSRF, injection, drift |\n| Prompt Security post-execution | ~10-50ms | PII leakage, data exfiltration, content injection |\n\n## The Market Context\n\n- Wiz: MCP in 80% of cloud environments, 1/6 exposed to internet\n- RufRoot CVE-2026-59726 (CVSS 10.0): Full RCE in 67K-star MCP platform\n- LiteLLM CVE-2026-30623 (CVSS 9.8): MCP command injection\n- Every enterprise deploying agents needs pre-execution + post-execution security\n\n## Links\n- [CCS Framework](https://github.com/Correctover/Correctover) | [IETF Draft](https://datatracker.ietf.org/doc/draft-cs2-mcp-ccs/) | [PANW Same Gap](https://gist.github.com/Correctover/19a40ba66828f148eb45c10d389bf227)\n", "creation_timestamp": "2026-08-04T08:30:53.140630Z"}, {"uuid": "f56c00b9-e71e-4110-a497-a9fbbe81cfb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30623", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3ms7rbdl7a72l", "content": "CVE-2026-30623 \u00b7 trending #5\n\nCurrently trending CVE - Hype Score: 4 - LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuratio... https://cvemon.intruder.io/cves/CVE-2026-30623", "creation_timestamp": "2026-08-04T00:33:43.979469Z"}, {"uuid": "ee8cc032-7ade-4dca-a687-7e2c39a3af48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30623", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrhlonigc2y", "content": "CVE-2026-30623\nA security issue exists in LiteLLM 1.18.10 that could allow an attacker to execute malicious code on your server with the same permissions as the LiteLLM process. This can happen if an attacker is able to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-16T14:38:05.569740Z"}, {"uuid": "6774b2e7-6e6e-4a9c-bd75-b3c992d1e0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30623", "type": "seen", "source": "https://bsky.app/profile/moez19.bsky.social/post/3mqu4qhknhb2i", "content": "Security note for AI infra folks: CVE-2026-30623 just landed -- a critical RCE in LiteLLM (1.74.2 to before 1.83.7) via stdio transport in MCP configs. Patched in 1.83.7-stable. If you route model calls through it, update today. #AIsecurity #LLM #DevOps", "creation_timestamp": "2026-07-17T16:01:54.100379Z"}, {"uuid": "36de0033-8b40-41bc-9bb3-f63fe5737abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30623", "type": "seen", "source": "Telegram/q3tIaYx4agF_M3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ", "content": "", "creation_timestamp": "2026-07-22T17:00:05.370820Z"}, {"uuid": "ec5627eb-b21d-4389-b5de-9d67f073797f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30623", "type": "seen", "source": "Telegram/wu7ZwWUDhyI14H4kQ3LWs1KWN75IcQ-iWlf3DfK8jhFVpKA", "content": "", "creation_timestamp": "2026-07-22T17:00:05.251292Z"}, {"uuid": "201ec2b4-cfd9-472a-a2ca-e1cb98b633cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30623", "type": "published-proof-of-concept", "source": "Telegram/q3tIaYx4agF_M3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ", "content": "", "creation_timestamp": "2026-07-23T00:00:09.025141Z"}, {"uuid": "6f59e934-1cec-497e-92d5-51b58d39ece2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30623", "type": "published-proof-of-concept", "source": "Telegram/wu7ZwWUDhyI14H4kQ3LWs1KWN75IcQ-iWlf3DfK8jhFVpKA", "content": "", "creation_timestamp": "2026-07-23T00:00:09.356281Z"}, {"uuid": "c07fda23-85be-4581-8e7d-c90de8717b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30623", "type": "seen", "source": "https://bsky.app/profile/foursignalsdev.bsky.social/post/3mrhsxn5tin2e", "content": "MCP's STDIO transport: a single mcp.json can execute shell commands (CVE-2026-30623). 200,000+ instances at risk. Switch to remote transports with auth.", "creation_timestamp": "2026-07-25T12:00:12.375777Z"}, {"uuid": "0340d44f-f607-4e1d-b482-844cf3a46673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30623", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrjm3uyai72n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 59 interactions\nCVE-2026-60137: 48 interactions\nCVE-2026-50522: 42 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-30623: 7 interactions\nCVE-2026-58662: 4 interactions\nCVE-2026-12569: 2 interactions\n", "creation_timestamp": "2026-07-26T05:02:38.026749Z"}, {"uuid": "39191c9a-890c-4d2d-a5e0-ce0f8205cc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-30623", "type": "seen", "source": "https://bsky.app/profile/genticnews.bsky.social/post/3mrk3iu3fy32n", "content": "MCP's CVE-2026-30623: Anthropic won't fix STDIO command injection\n\nCVE-2026-30623 exposes arbitrary command injection in all four official MCP SDKs; Anthropic won't fix it. 200,000+ instances vulnerable.\n\nhttps://gentic.news/article/mcp-s-cve-2026-30623-anthropic-won", "creation_timestamp": "2026-07-26T09:38:19.676621Z"}]}