We ran 74 MCP servers in isolated VMs. Here's what broke.

31 servers had path traversal vulnerabilities. unconstrained filesystem parameters. pass ../../etc/passwd and nothing stops it. these aren't obscure packages they have tens of thousands of installs ac