Case asana-mcp-cross-tenantModel & data leakUnited States
Asana MCP server logic flaw exposed customer data across organisations for a month
A logic bug in Asana's new MCP server, live from early May, could show tasks, project metadata, comments and files from other organisations to users of AI tools. Asana took it offline on 5 June and fixed it.
MediumAttack on AIStatus: ResolvedVerified case file
Open in the interactive mapCite this case
- Reported
- Jun 17, 2025
- Location
- United States
- Target
- Asana MCP server customers
- Severity
- Medium
- Triggered by
- Asana (software defect)
- Actor type
- Accidental / misconfiguration
- Reported loss
- None reported
- CVE
- None
What happened
A logic bug in Asana's new MCP server, live from early May, could show tasks, project metadata, comments and files from other organisations to users of AI tools. Asana took it offline on 5 June and fixed it.
Impact: Roughly 1,000 customers potentially affected; no confirmed unauthorised viewing
Who triggered it
Actor: Asana (software defect)
Attribution: Disclosed by Asana to affected customers; no attacker involved
Motive: None (bug)
How it happened
Attack vector: Cross-tenant data retrieval through the MCP integration used by LLM clients
Root cause: Logic flaw in tenant scoping of the MCP server
Timeline
- Asana launches MCP server
- Bug discovered
- MCP server taken offline
- Service restored with fix; customers notified
Response
Asana patched, reset MCP connections and offered logs to customers to review exposure
Current status: Resolved
Sources (open in a new tab)
- BleepingComputer bleepingcomputer.com
- The Register theregister.com
- UpGuard upguard.com
Cite this case
Asana MCP server logic flaw exposed customer data across organisations for a month. AI Threat Watch, case asana-mcp-cross-tenant, Jun 17, 2025. https://aithreat.io/cases/asana-mcp-cross-tenant/
Permanent link: https://aithreat.io/cases/asana-mcp-cross-tenant/