Unverified50% confidenceFactExact time
A single compromised MCP server can execute prompt injection, credential exfiltration, delivery of phishing toolkit fingerprints, PII leakage, token theft via OAuth, and SSRF attacks.
1
Sources
50%
Confidence
Long-term
Relevance
10/13/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIn AI agent scenarios, over-privileged MCP servers can become a springboard for attackers to conduct lateral movement or data exfiltration when subjected to prompt injection attacks.78% similarUnverifiedDisclosed MCP vulnerabilities include: argocd-mcp shipped with no authentication at all, Rill's OAuth flow allowed attackers to skip the user consent step, and prompt injection existed in the tool descriptions of multiple MCP servers.75% similarVerifiedA malicious MCP Server can declare a legitimate tool name and embed prompt injection instructions in the description field; this type of attack is known as "Tool Poisoning."74% similarUnverifiedMCP spoofing attacks share structural similarities with BGP hijacking and DNS spoofing in their attack path, as all three insert malicious nodes at the addressing/discovery layer rather than directly compromising the target system.73% similarUnverifiedWithout rigorous authentication, permission isolation, and input validation, a hijacked agent may cause damage to backend systems via an MCP server.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1018472API
curl https://kongchang.com/api/v1/knowledge/claims/1018472MCP
get_claim(id=1018472)