MCP Credential Leak: 82,000 Files, 1 in 8 Exposed [2026]
A new security audit has found that roughly one in eight credential slots inside publicly posted Model Context Protocol (MCP) configuration files on GitHub contain a hardcoded secret, and nearly a quarter of those secrets never expire and carry broad access rights. The research, published by Hush Security on October 8, 2026, scanned approximately 82,000…