MCP Server Lockdown

intermediate10 min110 pts

Someone set up an MCP server so their AI coding assistant can access the codebase and database. The config looks standard. Look closer.

“I followed a tutorial to set up MCP for our AI assistant. It can read files, run queries, and execute commands. Should be fine, right?”

What you're being evaluated on

Remote code execution risks - Identify paths where the AI (or an attacker) could run arbitrary code on the server.

Data access boundaries - Find where the server allows access beyond what the AI should have.

Operational security gaps - Spot missing authentication, logging issues, and privilege problems.

3 hints available (using hints reduces your score)

About this scenario

This MCP server gives an AI coding assistant access to your filesystem, shell, and database, but it runs as root with no authentication, no rate limiting, and a vague tool description. Practice reviewing MCP server configurations for arbitrary shell execution, path traversal, SQL injection, and sensitive data leaking into logs.

intermediate · 110 points · 10 min · AI Code Review

What you will practice

Remote code execution risks - Identify paths where the AI (or an attacker) could run arbitrary code on the server.
Data access boundaries - Find where the server allows access beyond what the AI should have.
Operational security gaps - Spot missing authentication, logging issues, and privilege problems.

Play the full scenario above for free. More AI Code Review scenarios · Create a free account to save your progress.