5 min read
News Brief Glow Labs reports that AI coding agents install archived MCP reference servers from training data, including a Puppeteer server with a high-severity RCE bug that its maintainers say will not be fixed. No CVEs exist and no exploitation has been seen.