Unmaintained MCP Server is detected in a Pipeline

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_366
Category - Subcategory	Pipeline Configuration - 3rd Party Services
Severity	HIGH

Impact

An MCP Server invoked in a CI/CD pipeline has not received updates or security patches for more than 180 days. Unmaintained software is vulnerable to known exploits and may contain unpatched CVEs that will execute on every pipeline run.