Asana

Disclosed Jun 18, 2025Unverified

Bug in Asana's AI MCP server exposed customer data to other organizations

A logic flaw in the Model Context Protocol server Asana launched on May 1, 2025 for LLM features could expose data from one customer's instance to MCP users at other organizations, limited to each user's access scope. Asana warned users and said it was not the result of a hack.

What is known

People affected	Not stated in the sources we have
Disclosed	Jun 18, 2025
Attack	AI or model
Data exposed	Internal documentsMessages
Sector	Tech · US
Status	Unverified: not yet confirmed by an official notice, a filing or the organization

Sources

Newsbleepingcomputer.com

Asana warns MCP AI feature exposed customer data to other orgs

The organizationasana.com

Asana: security page

Notices filed

TotalJun 18, 2025

ResearchCount not stated

History of this record

source_type2026-09-25

press to companyby weeklySource

source_url2026-09-25

https://www.bleepingcomputer.com/news/security/asana-warns-mcp-ai-feature-exposed-customer-data-to-other-orgs/ to https://asana.com/securityby weeklySource

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Asana