Asana MCP AI Bug Exposed Customer Data to Rivals

Asana has alerted users to a flaw in its new Model Context Protocol (MCP), which may have exposed customer data across different organizations. The issue, linked to the Asana MCP AI Bug, surfaced in the early stages of the feature’s deployment. The company warned that the bug could have allowed data from one user’s instance to be visible to another organization without authorization.

The exposure risk stemmed from how the MCP feature handled contextual information. Asana said it identified the issue and took steps to mitigate further impact. The company did not disclose how many users or organizations were affected. However, it emphasized that the flaw originated from the initial implementation of the tool.

Asana has since updated the MCP functionality to prevent future data leaks and is continuing its investigation. The Asana MCP AI Bug highlights growing concerns tied to AI integrations in enterprise platforms.

Read the full report at:
https://www.bleepingcomputer.com/news/security/asana-warns-mcp-ai-feature-exposed-customer-data-to-other-orgs/