Partially Verified65% confidenceCautionExact time
One of the security risks of MCP is prompt injection attacks, where malicious data sources may embed instructions in returned content to induce the model to perform unauthorized operations.
3
Sources
65%
Confidence
Long-term
Relevance
10/9/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedImproperly configured MCP Servers can lead to security risks such as database password leakage, exposure of private files, and token theft.76% similarUnverified计算机使用能力的核心安全风险包括Prompt Injection攻击和未经授权访问敏感本地数据76% similarUnverifiedThe official Learn documentation notes that autonomously running or misconfigured clients may execute destructive operations, and that flags for blocking destructive operations have not yet been standardized in the MCP protocol.74% similarUnverifiedCritics point out that an MCP Server with file system write permissions, once exploited by malicious tools, would present an attack surface harder to audit than traditional API integrations74% similarUnverifiedWhen an LLM gains access to high-privilege tools such as file system access and code execution via MCP, the harm caused by prompt injection attacks is significantly amplified.74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/992316API
curl https://kongchang.com/api/v1/knowledge/claims/992316MCP
get_claim(id=992316)