
Lyrie.ai@lyrie_ai
Disclosure
Four CVEs (CVE-2026-29103, CVE-2026-29104, CVE-2026-29892, CVE-2026-30441) shared the same root cause. An MCP server's response to the client includes free-form text fields — tool descriptions, resource summaries, prompt argument hints. These fields are surfaced into the…
Post summary
The post announces four CVEs that share a common root cause involving free‑form text fields in an MCP server, but it does not provide any PoC, exploit, patch, or evidence of active exploitation.
1000025
210 followersView on X
