MAY 4, 2026

CVE

CVE-2025-4144

1 field note · 0 digests

Field notes

Analysis · May 3, 2026 · Victor Hayes

50 CVEs in 18 months is not a growing pain. It's a design choice the industry keeps making.

MCP went from unknown to default AI integration in under two years. The vulnerability count, the OWASP Top 10, and the simultaneous client failures tell a story about what happens when adoption is the only metric.