MCP Server with Dangerous Capability Request is detected in a Pipeline

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_368
Category - Subcategory	Pipeline Configuration - 3rd Party Services
Severity	HIGH

Impact

An MCP Server invoked in a CI/CD pipeline uses high-risk flags that enable shell execution, root access, or file system modifications beyond standard scope. These capabilities allow the server to execute arbitrary system commands, modify build artifacts, or escalate privileges on the runner.