Cortex CloudApplication Security
MCP Server with Dangerous Capability Request is detected in SCM Repository
Rule Details
Cortex AppSec Rule ID
APPSEC_CICD_361
Category - Subcategory
Pipeline Configuration - 3rd Party Services
Severity
HIGH
Impact
An MCP Server is configured with high-risk flags that enable shell execution, root access, or file system modifications beyond standard scope. These capabilities allow the server to execute arbitrary system commands, modify critical files, or escalate privileges.
PreviousArchived or Deprecated MCP Server in use, detected in SCM repository
NextA Rejected MCP Server is in-use (recognized in SCM Repository config file)
Last updated
Was this helpful?
