MCP

Cline's CLI v3.0.71 release notes say plugins now load inside the hub, so no JavaScript runtime is needed on PATH, and describe a new cline hub plugins status command.

OpenAI's Codex 0.162.0 adds worktree tools, task pinning and clickable URLs, plus sandbox fixes; 0.161.0 a day earlier made GPT-6.1 Sol the default model.

A high-severity flaw in the official MCP Python SDK let a malicious server redirect OAuth credentials to an attacker's endpoint; fixes ship in 1.30.0 and 2.2.0, with extra steps needed.

CVE-2026-90898 lets unauthenticated attackers execute arbitrary commands on Bifrost AI gateway servers via a single HTTP request; fixed in transports/v2.1.0.

A crafted marimo notebook could run an attacker's command as a local subprocess the moment it was opened in edit mode, via a fake MCP server entry in its configuration.

Cloudflare opens a private beta of WriteGuard, a policy and audit layer that classifies and can block risky write actions AI agents take through MCP servers.

AMD's open-source local AI agent framework for Ryzen AI NPUs gains a terminal-native agent hub, cross-surface confirmation gates, and MCP security fixes.

A critical Jinja2 template-injection bug let attacker-controlled repository files execute code in the Serena coding agent, bypassing its own trust gate.

Six companies agreed on a shared packaging format for AI agent skills and MCP servers; Anthropic, which created the underlying protocols, is not part of the effort.

GitHub shipped enterprise-wide allow/deny lists for MCP servers reachable through Copilot, enforced with fail-closed policy across the Copilot app, CLI, and VS Code.

The 2026-07-28 MCP release candidate makes the protocol core stateless, formalizes an Extensions framework, and deprecates Roots, Sampling, and Logging. The RC locked May 21 for a July 28 final.

Red Hat used its May 12 Summit keynote to take Red Hat Desktop with Podman Desktop and isolated AI agent sandboxing to general availability, and to preview Red Hat AI 3.4 with vLLM speculative decoding, Model-as-a-Service, MCP tooling, and an agent evaluation hub.