MCP Servers can be Exploited to Execute Arbitrary Code and Exfiltrate Sensitive Data