Unverified50% confidenceOpinionExact time
MCP tools typically require elevated system permissions to operate local software, and once maliciously exploited, the damage they can cause may far exceed that of vulnerabilities in ordinary open-source libraries.
1
Sources
50%
Confidence
Long-term
Relevance
9/12/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedMCP tools are essentially arbitrary code execution, indirect prompt injection is a real-world threat, and attack vectors can be hidden in resource content rather than in direct user input.77% similarVerifiedMCP currently lacks fine-grained permission control, and third-party servers of unknown origin may contain malicious instructions.74% similarUnverifiedMCP connectors largely exist as community-driven open-source projects, lacking unified security review and signed distribution mechanisms.74% similarUnverifiedIn MCP's security design, tool invocations are stipulated to require explicit user authorization, and resource access is constrained by permission boundaries.73% similarUnverifiedThe core limitation of MCP is that the existence of a tool must be known in advance and manually connected to the agent before use, lacking an automatic discovery mechanism.73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/913687API
curl https://kongchang.com/api/v1/knowledge/claims/913687MCP
get_claim(id=913687)