Enterprises using the lightweight, open-source Flowise platform to power self-hosted AI workloads now have a new near-max-severity issue to worry about.
Researchers at Obsidian Security have detailed a one-click remote code execution (RCE) vulnerability affecting self-hosted Flowise deployments through its implementation of Model Context Protocol (MCP) stdio servers.
The problem is essentially a sandboxing failure of attacker-controlled MCP configurations, leading to server-side code execution.
“Post-auth RCE in Flowise can be triggered with a single click via a malicious chatflow import before any save or run,” the researchers said in a blog post. “The official patch relies on input validation that is trivially bypassed and fails to address the root cause.”
Flowise is commonly used to develop internal AI assistants, retrieval-augmented generation (RAG) applications, customer-facing chatbots, and autonomous agents connected to business systems.
The flaw does not affect Flowise Cloud, a
Nous Research's Hermes Agent adds Tool Search to fix MCP context bloat using BM25 progressive schema disclosure.
The post Hermes Agent Ships Tool Search for MCP: Anthropic Evals Show 49% to 74% Accuracy Gain on Opus 4 appeared first on MarkTechPost.
Robinhood is enabling AI agents to trade stocks and make payments on users’ behalf, marking a significant push into agentic finance. Users can now create dedicated accounts for their AI agents, preload them with funds, and connect them via the platform’s Model Context Protocol server to execute trades, analyse portfolio risk, and identify new investment […]
The post Base MCP Links AI Agents Like ChatGPT to Blockchain Actions appeared on BitcoinEthereumNews.com.
Timothy Morano
May 27, 2026 04:30
Base MCP enables AI agents like ChatGPT to execute blockchain transactions, marking a step forward in integrating AI with DeFi and onchain wallets.
Coinbase-backed Ethereum layer-2 network Base has unveiled its Model Context Protocol (MCP), a tool allowing AI agents such as ChatGPT and Claude to interact directly with blockchain wallets. Officially launched on May 26, 2026, Base MCP lets users execute onchain actions—including token transfers, swaps, and DeFi protocol interactions—via natural language prompts. The tool connects Base accounts, which are smart wallets, to AI agents through a secure framework. Users can perform blockchain operations by chatting with the AI agent, which then proposes a transaction. A separate wallet interface opens up for users to approve or reject the action, ensuring private keys remain secure. Acco
Base, the Coinbase-incubated Ethereum layer two ( L2) network, launched Base MCP on Tuesday, a Model Context Protocol gateway that connects artificial intelligence (AI) agents directly to users’ Base Accounts for onchain transactions. Base Deploys MCP Gateway for Claude and Cursor Users to Interact With Onchain Apps The tool allows users of AI interfaces, including […]
Base introduces Model Context Protocol integration enabling AI agents to execute swaps, trades, and portfolio management across leading DeFi protocols.
Base launches Base MCP, letting ChatGPT and Claude agents connect to Base Accounts for swaps, transfers, portfolios, and app access.
The post Base launches MCP to connect ChatGPT and Claude agents to onchain wallet actions appeared first on Crypto Briefing.
OmniVoice Studio runs voice cloning, video dubbing, real-time dictation, and speaker diarization entirely on your own hardware. No API keys, no cloud account, and no subscription required. The project supports 646 languages for TTS and exposes an MCP server for integration with Claude, Cursor, or any MCP client.
The post Meet OmniVoice Studio: A Local, Open-Source Alternative to ElevenLabs appeared first on MarkTechPost.
There’s no denying the excitement around Model Context Protocol (MCP), an open protocol for connecting AI assistants with external data, tools, and APIs. Since its debut by Anthropic in late 2024, thousands of MCP servers have emerged for devops, cloud, and beyond.
Now that developers have integrated MCP servers into applications, and they have been battle-tested, usage patterns are emerging. For instance, supplying better context for AI is the most commonly cited primary value of using MCP, according to Zuplo’s State of MCP report released in early 2026. The Zuplo report also found that 63% of MCP users adopt MCP servers for accessing data sources such as documentation or knowledge bases.
In software development, context engineering is the act of supplying AI coding agents with relevant data and capabilities to improve the accuracy and relevance of their outputs. It also involves optimizing the breadth of information to guide efficient processing. Such context can include coding style