--- title: MCP goes stateless, Zapscape KVM escape needs patching now description: Anthropic shipped MCP 2026-07-28, rewriting the protocol as fully stateless — servers can now run on Lambda or Cloudflare Workers without session management. A... canonical: https://daily.dev/posts/mcp-goes-stateless-zapscape-kvm-escape-needs-patching-now-piejrtadw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: MCP goes stateless, Zapscape KVM escape needs patching now | daily.dev og:description: Anthropic shipped MCP 2026-07-28, rewriting the protocol as fully stateless — servers can now run on Lambda or Cloudflare Workers without session management. A... og:url: https://daily.dev/posts/mcp-goes-stateless-zapscape-kvm-escape-needs-patching-now-piejrtadw og:image: https://api.daily.dev/og/posts/pieJrTaDw.png og:image:alt: MCP goes stateless, Zapscape KVM escape needs patching now og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # MCP goes stateless, Zapscape KVM escape needs patching now **[Backend Digest](https://daily.dev/sources/backend_digest)** · 5 min read · 1 upvotes · 1 comments ## Summary Anthropic shipped MCP 2026-07-28, rewriting the protocol as fully stateless — servers can now run on Lambda or Cloudflare Workers without session management. A new KVM guest-to-host escape called Zapscape was patched July 21; if you're on RHEL with /dev/kvm world-writable, unprivileged local users can exploit it too. Shopify published a detailed post-mortem on replacing Redis with MySQL 8 for inventory reservations, surviving Black Friday at $5.1M/min. GitHub shipped a batch of npm and Actions supply chain hardening changes, though the strongest protections remain opt-in. ## Content **TLDR:** Anthropic shipped MCP 2026-07-28, rewriting the protocol as fully stateless — servers can now run on Lambda or Cloudflare Workers without session management. A new KVM guest-to-host escape called Zapscape was patched July 21; if you're on RHEL with /dev/kvm world-writable, unprivileged local users can exploit it too. Shopify published a detailed post-mortem on replacing Redis with MySQL 8 for inventory reservations, surviving Black Friday at $5.1M/min. GitHub shipped a batch of npm and Actions supply chain hardening changes, though the strongest protections remain opt-in. --- ## MCP 2026-07-28 rewrites the protocol as stateless, breaks old clients Anthropic's MCP 2026-07-28 drops persistent connections entirely. Every request now carries its own context inline via a `_meta` field, which means MCP servers can run on serverless infrastructure — Lambda, Cloudflare Workers — without Durable Objects or session management overhead. The operational improvement is real: new HTTP headers (`Mcp-Protocol-Version`, `Mcp-Method`, `Mcp-Name`) let proxies route and rate-limit without inspecting request bodies. The catch is a hard compatibility break — old clients expecting stateful connections can't talk to new stateless servers. All four Tier-1 SDKs have beta releases; TypeScript gets migration codemods. Sentry and Linear are already running it in production. [Read more](https://daily.dev/posts/pNWQYR3Mz) ## Zapscape: KVM guest-to-host escape patched July 21, check your distro now Zapscape is a use-after-free in KVM's shadow MMU emulation code, affecting x86 and x86_64, introduced around mid-2020 and patched July 21. An attacker with guest VM access can crash the host kernel or execute code as root, potentially compromising every VM on the machine. On distros where `/dev/kvm` is world-writable — RHEL is the named example — unprivileged local users can exploit it without any guest access at all. A non-weaponized proof-of-concept is already public. Ubuntu still hasn't shipped a patch for the previous KVM breakout (Januscape), so if you're running KVM-based infrastructure, verify your distro has the July 21 fix before assuming you're covered. [Read more](https://daily.dev/posts/4v03DtmLp) ## Shopify replaced Redis with MySQL 8 for inventory reservations, survived Black Friday at $5.1M/min Shopify's engineering team swapped Redis for MySQL 8 on inventory reservations and held up through Black Friday 2025 peak traffic. The design uses one row per sellable unit with SKIP LOCKED to avoid contention, a bounded pool of 1,000 rows per item/location to keep scans fast, and READ COMMITTED isolation to eliminate gap locks. The actual bottleneck wasn't the reservation queries — it was connection exhaustion from other checkout processes. Instrumenting SQL statements with connection tags at the app layer and aggregating at ProxySQL revealed which callers held connections longest; cleaning up the checkout path removed 50% of reads and 33% of transactions on the primary. During high-volume flash sales, writer CPU stayed under 50%. [Read more](https://daily.dev/posts/7UecbCOOA) ## GitHub ships npm and Actions supply chain hardening, debate follows on signing vs. delays GitHub summarized supply chain security changes shipped between March and July 2026. The headline changes: a 72-hour read-only freeze on high-impact npm accounts after recovery changes, actions/checkout now blocking untrusted fork code by default, npm v12 disabling install scripts and remote-URL dependencies by default, and Dependabot waiting three days before opening PRs. The community argument on Hacker News is whether time delays are the right instrument — npm has reportedly declined to implement author-side package signing for a decade, and critics call delays a low-tech workaround. The strongest protections (staged and trusted publishing) remain opt-in and unevenly adopted. [Read more](https://daily.dev/posts/VeLRggPFA) --- ## Also notable - **Solid Objects v0.5.1 ports Cloudflare Durable Objects to Rails, backed by Postgres/MySQL/SQLite:** Solid Objects is a Ruby gem that brings the virtual-actor model to Rails using your existing database — no Redis, no Cloudflare account — with fenced single-writer safety via monotonic generation tokens, per-object alarms, and automatic Turbo Stream reactivity from ERB; requires Ruby 3.3+ and Rails 8.0+. [Read more](https://daily.dev/feed-by-ids?id=pEYqPVOHg&id=MnYhoRafh&id=WdHVumaVJ) - **Zapscape context: kube-proxy iptables mode uses random pod selection, not round robin:** Kubernetes' default kube-proxy iptables mode picks backend pods randomly via the statistic module — no memory of prior picks, no even distribution guaranteed — and true round robin requires switching kube-proxy to IPVS mode. [Read more](https://daily.dev/posts/85fNYMtjx) - **Refactoring an 83%-token reduction: 17,155-line data-access layer cut AI agent input from 159,564 to 27,360 tokens:** A martinfowler.com piece cited in Java Weekly 658 quantifies the economic case for refactoring in the agent era: cutting a 17,155-line data-access layer reduced AI agent input tokens by 83%, from 159,564 to 27,360 per call. [Read more](https://daily.dev/posts/qxmBCssFW) - **Cloudflare Precursor: continuous behavioral bot detection now in open beta, logged 206M events in one day:** Precursor monitors mouse movements, keyboard timing, and focus changes throughout a session rather than at a single challenge point, logging 206 million evaluation events across 73,438 zones in its first day — free during open beta, integrates with Enterprise Bot Management. [Read more](https://daily.dev/posts/SQli1b4Px) - **KubeVirt cross-cluster live migration requires EVPN/VXLAN for stretched L2; OpenPERouter exposes it as Kubernetes CRDs:** Cross-cluster KubeVirt VM migration needs a stretched Layer 2 domain and a dedicated migration network — EVPN/VXLAN via OpenPERouter's L2VNI CRDs (VNI 110 for app traffic, VNI 666 for migration) replaces what previously required VLANs and network-team change windows, using KubeVirt's decentralized live migration available since v1.6. [Read more](https://daily.dev/posts/mgXTn2HDF) ## Community discussion Top comments from developers on daily.dev. **@taiwofrancis** · 0 upvotes > There are a lot of good engineering lessons buried in this roundup. ## Similar posts on daily.dev - [MCP is now stateless: what the 2026-07-28 update changes](https://daily.dev/posts/mcp-is-now-stateless-what-the-2026-07-28-update-changes-hc2vhg5ll) · Flavio Copes · 9 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#mcp](https://daily.dev/tags/mcp), [#mysql](https://daily.dev/tags/mysql) [View this post on daily.dev](https://daily.dev/posts/mcp-goes-stateless-zapscape-kvm-escape-needs-patching-now-piejrtadw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/mcp-goes-stateless-zapscape-kvm-escape-needs-patching-now-piejrtadw","headline":"MCP goes stateless, Zapscape KVM escape needs patching now","text":"Anthropic shipped MCP 2026-07-28, rewriting the protocol as fully stateless — servers can now run on Lambda or Cloudflare Workers without session management. A new KVM guest-to-host escape called Zapscape was patched July 21; if you're on RHEL with /dev/kvm world-writable, unprivileged local users can exploit it too. Shopify published a detailed post-mortem on replacing Redis with MySQL 8 for inventory reservations, surviving Black Friday at $5.1M/min. GitHub shipped a batch of npm and Actions supply chain hardening changes, though the strongest protections remain opt-in.","url":"https://daily.dev/posts/mcp-goes-stateless-zapscape-kvm-escape-needs-patching-now-piejrtadw","datePublished":"2026-08-09T04:18:48.602Z","dateModified":"2026-08-09T04:19:19.517Z","author":{"@type":"Organization","name":"Backend Digest","logo":"https://media.daily.dev/image/upload/s--9uCSrsAb--/f_auto,q_auto/v1773839398/logos/backend_digest?_a=BAMAMiiu0","url":"https://daily.dev/sources/backend_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"comment":[{"@type":"Comment","text":"There are a lot of good engineering lessons buried in this roundup.","datePublished":"2026-08-09T04:47:17.838Z","url":"https://daily.dev/posts/pieJrTaDw#c-zB4zNwAGL","author":{"@type":"Person","name":"Taiwo Francis Oguntade","url":"https://daily.dev/taiwofrancis","image":"https://media.daily.dev/image/upload/s--px3_Pvo4--/f_auto/v1785515368/avatars/avatar_FStpm3ZejUD3qGlEeoOUS?_a=BAMAMicg0"}}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/backend_digest","name":"Backend Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Backend Digest","item":"https://daily.dev/sources/backend_digest"},{"@type":"ListItem","position":3,"name":"MCP goes stateless, Zapscape KVM escape needs patching now"}]} ```