MCP Server with Dangerous Capability Request is detected in IDE

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_375
Category - Subcategory	Pipeline Configuration - 3rd Party Services
Severity	HIGH

Impact

An MCP Server configured in a developer's IDE uses high-risk flags that enable shell execution, root access, or file system modifications beyond standard scope. These capabilities allow the server to execute arbitrary system commands, modify critical files, or escalate privileges.