2026-07-07 · 2026-Q3
Trend Micro "Stars Don't Save You" MCP Ecosystem Study
Outside the model: ContextAgent tooling was not the attack surface, so no layer applies.
- Fixable
- Unknown
- Vendor response
- Unknown
- In the wild
- No
- Actor
- Not applicable
Target
9,695 MCP servers indexed across GitHub, Glama, Lobehub, and PulseMCP
Impact
5,832 servers carried at least one weakness and 2,259 had confirmed exploitable vulnerabilities across 4,982 distinct issues, including 2,054 with no authentication, 880 arbitrary file access, 490 denial of service, 476 command injection, 422 SSRF, 211 SQL injection, and 185 prompt injection. The study found no correlation between GitHub stars or verification badges and actual security
Root cause
An immature MCP ecosystem where popularity signals do not track security and many servers ship without authentication or input validation
Sources
Catalog
Cite this: AgentProv incident record: Trend Micro "Stars Don't Save You" MCP Ecosystem Study (2026-07-07). https://agentprov.com/incidents/2026-07-07-trend-micro-stars-don-t-save-you-mcp-ecosystem-study