Governance Attack Surface Review: EigenCloud

EigenCloud, a cross-chain liquidity-aggregation protocol with $6.1 B TVL, underwent a Governance Attack Surface Review focusing on its EIGToken, EigenGovernor, and Timelock components. Simultaneously, October 2026 saw significant Model Context Protocol security failures. Notable vulnerabilities include a Langflow RCE (CVE-2026-105697) with a CVSS 9.9, allowing arbitrary OS commands via MCP server configs, and an official fetch server SSRF (CVE-2026-104120) with a CVSS 7.3, highlighting recurring flaws in server implementations.