Name: MCPwned: Hacking MCP Servers With One Skeleton Key Vulnerability - Jonathan Leitschuh, Independent
Start: 2026-04-03T15:25:00-0400
End: 2026-04-03T15:50:00-0400

April 2-3, 2026
New York, NY
View More Details & Registration

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for MCP Dev Summit North America to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration..

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

MCPwned: Hacking MCP Servers With One Skeleton Key Vulnerability - Jonathan Leitschuh, Independent

Friday April 3, 2026 3:25pm - 3:50pm EDT

Astor Ballroom (7th Floor)

MCPwned weaponizes a widely overlooked MCP-spec weakness, browser-based DNS rebinding, against SSE & streaming-HTTP MCP servers to exfiltrate data and escalate access.
This skeleton key vulnerability hacks your locally running MCP server, just by getting you to visit a malicious website.

Speakers

Jonathan Leitschuh

Open Source Security Researcher, Independent

Jonathan Leitschuh is an open source software security researcher and self-described Vulnerability Janitor. He was the inaugural Dan Kaminsky Fellow at HUMAN Security and later led research for OpenSSF’s Alpha-Omega project. He is best known for his 2019 Zoom zero-day disclosure... Read More →

Friday April 3, 2026 3:25pm - 3:50pm EDT
Astor Ballroom (7th Floor)

Security and Operations

Audience Experience Level Intermediate

MCP Dev Summit North America

Jonathan Leitschuh

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Get help with the event