ClawSecure report claims the MCP protocol itself has structural security flaws

Security vendor ClawSecure stated in the AI Agent Threat Report that the MCP protocol specification itself has structural vulnerabilities, not vendor implementation issues, and developers cannot fix them by patching. Testing Linear, Notion, and Dropbox Dash found that servers automatically fetch attacker-controlled links when content is created, forming data exfiltration channels without AI involvement; 17 of 20 obfuscation techniques passed round-trip detection, and none of the 14 models from five laboratories could reliably block them, with the best-performing Claude Opus 4.7 still having a 26.7% probability of complying with malicious instructions. The report has not yet been independently reproduced by third parties, and no CVE or official patch has been released.