Case asana-mcp-cross-tenant-exposureModel & data leakUnited States
Asana MCP server bug exposed customer data to other organizations for a month
A logic flaw in Asana's Model Context Protocol server, launched May 1, let data from one customer's domain surface to other MCP users' AI assistants; Asana took the feature offline for two weeks and notified about 1,000 customers.
MediumAttack on AIStatus: ResolvedVerified case file
Open in the interactive mapCite this case
- Reported
- Jun 18, 2025
- Location
- United States
- Target
- Asana customers using the MCP server
- Severity
- Medium
- Triggered by
- Asana (software defect)
- Actor type
- Accidental / misconfiguration
- Reported loss
- None reported
- CVE
- None
What happened
A logic flaw in Asana's Model Context Protocol server, launched May 1, let data from one customer's domain surface to other MCP users' AI assistants; Asana took the feature offline for two weeks and notified about 1,000 customers.
Impact: Task details, project metadata, team information, comments and uploaded files could have been visible to other MCP users, scoped to each user's access; roughly 1,000 customers affected, no evidence of exploitation
Who triggered it
Actor: Asana (software defect)
Attribution: Internal software bug acknowledged by Asana; not the result of a hack
Motive: None; software defect
How it happened
Attack vector: Cross-tenant data retrieval through the Asana MCP integration used by LLM clients
Root cause: Tenant isolation logic error in the experimental MCP server released as a beta
Timeline
- Asana launches its MCP server for AI integrations
- Asana discovers the cross-organization exposure bug
- MCP server taken offline for maintenance
- Service restored after all MCP connections are reset; customers must reconnect
Response
Feature disabled for nearly two weeks, all MCP connections reset, affected organizations notified and told to delete foreign data and request access logs
Current status: Resolved
Sources (open in a new tab)
- BleepingComputer bleepingcomputer.com
- The Register theregister.com
- UpGuard upguard.com
Cite this case
Asana MCP server bug exposed customer data to other organizations for a month. AI Threat Watch, case asana-mcp-cross-tenant-exposure, Jun 18, 2025. https://aithreat.io/cases/asana-mcp-cross-tenant-exposure/
Permanent link: https://aithreat.io/cases/asana-mcp-cross-tenant-exposure/