Mordehai Attia

Founder of Corsen AI — endpoint security for AI agents and MCP.

• 🌐 Website — https://corsen.ai
• 💼 LinkedIn — https://www.linkedin.com/in/mordehai-attia
• 🏢 Corsen AI — https://www.linkedin.com/company/corsenai
• 📍 Paris

Security research

Independent research on MCP servers and the open source they build on, reported to the maintainers first.

• AWS Labs postgres-mcp-server — read-only mode bypass leading to OS command execution, CVE-2026-87911 (critical, fixed in 1.1.7; credited together with Ryan von Brubeck)
• mcp-atlassian — project and space filter bypass letting an MCP agent read data outside its scope, CVE-2026-77251 (fixed in 0.22.0)
• Google mcp-toolbox — missing OAuth audience check in non-MCP mode, fix under review (PR #3676)
• Upstream bug reports: Cloudflare Pingora #979 (accepted), Hugging Face huggingface_hub #4749 (fixed in v1.31.0, credited in the fix)