An npm Package for AI Agent Orchestration Just Shipped With Its Front Door Unlocked. Here's What the CVE Actually Reveals.

MCP ecosystem is growing fast enough that security researchers are now hunting it like any other production attack surface. CVE-2026-46701 — published May 21, 2026 — is the first notable proof that th...