From MCP to Shell

How MCP Authentication Flaws Enable RCE in Claude Code, Gemini CLI, and More