2025 Asana — Model Context Protocol server paused after bug risked cross-tenant data exposure until patch
Data compromised
Asana workspace data reachable across tenant boundaries if misuse occurred—vendor described direct notifications where relevant.
Technical writeup
Asana disabled its MCP integration for roughly two weeks in June 2025 after discovering an implementation flaw that could expose information across organizations; bank trade press summarized Asana status-page timelines and direct customer outreach.
Root cause
Implementation flaw in MCP server handling undermining tenant isolation until remediated (per Asana status timeline cited in press).