What’s Vulnerable › Products

ArcadeAI arcade-mcp vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ArcadeAI arcade-mcp version is affected

Latest ArcadeAI arcade-mcp vulnerabilities

• CVE-2025-66454 — Arcade MCP Default Hardcoded Worker Secret Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints (CVSS 6.5)